61 matches found
CVE-2022-4669
The CVE-2022-4669 entry concerns the Page Builder: Live Composer WordPress plugin, affected up to version 1.5.22 where shortcode attributes were not properly validated/escaped before output in posts/pages. This stored-XSS flaw could enable a contributor+ user to inject malicious scripts via short...
WordPress Page Builder: Live Composer Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.22 Fixed in 1.5.23 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4669 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 3a851e56815e Credits Istv...
RHEL 7 : devtoolset-11-gcc (RHSA-2021:4669)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4669 advisory. The GNU Compiler Collection GCC is a portable compiler suite with support for various programming languages, including C, C++, and Fortran. The...
CVE-2020-4669
CVE-2020-4669 affects IBM Planning Analytics Local 2.0 when it connects to a MongoDB server that is configured to allow remote connections without password authentication. The MongoDB instance is listening on a remote port, enabling a remote attacker to gain unauthorized access to the database. R...
Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities
Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace and all IBM Planning Analytics Cloud Data Centers have been updated. Vulnerability Details...
Ubuntu 16.04 LTS : SquirrelMail vulnerability (USN-4669-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4669-1 advisory. It was discovered that a cross-site scripting XSS vulnerability in SquirrelMail allows remote attackers to use malicious script content from HTML e-mail to execut...
Safari Webkit JIT Exploit for iOS 7.1.2
This module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we download and...
Safari Webkit For iOS 7.1.2 JIT Optimization Bug Exploit
This Metasploit module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we...
Debian: Security Advisory (DSA-4669-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4669
CVE-2019-4669 affects IBM BPM/Business Automation Workflow: IBM Business Process Manager 8.5.7.0 (and 8.5.7.0 2017.06), 8.6.0.0 (and 8.6.0.0 CF2018.03), and IBM Business Automation Workflow 18.0.0.1–19.0.0.3 are vulnerable to SQL injection. A remote attacker could send crafted SQL to view, add, m...
CVE-2019-4669
IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, ad...
CVE-2010-4669
creationtimestamp| type| source ---|---|--- 2020-02-20 18:52:27+00:00| seen| https://t.me/cibsecurity/9975...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4669)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4669 advisory. 4.1.12-124.27.2 - x86/speculation/mds: Check for the right microcode before setting mitigation Kanth Ghatraju Orabug: 29797118 - vxlan: test...
CVE-2017-4669
CVE-2017-4669 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-4669
The CVE-2015-4669 entry pertains to Xceedium Xsuite 2.x where the MySQL root user has no password set, allowing Local access to the databases. The connected documents corroborate that this vulnerability enables local users to access databases and, in combination with other issues (e.g., command i...
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
CVE-2016-4669
creationtimestamp| type| source ---|---|--- 2016-10-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40654 2020-08-14 20:12:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/appleios/browser/safarijit.rb 2025-02-06 03:13:42+00:00| seen|...
About the security content of watchOS 3.1
About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2014-4669
HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...