CVE-2022-4672

CVE-2022-4672 affects WordPress Simple Shopping Cart (plugin) versions prior to 4.6.2. The root cause is lack of validation and escaping of certain shortcode attributes before output, enabling Stored XSS from a user with as low as a contributor to target high-privilege admins. Public details show...

CVE-2022-4672 WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode

The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used...

CVE-2020-4672

creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:48+00:00| seen| https://t.me/cibsecurity/16375...

Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to information exposure (CVE-2019-4672)

Summary IBM QRadar Advisor with Watson App for IBM QRadar SIEM could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. Vulnerability Details CVEID: CVE-2019-4672 DESCRIPTION: IBM QRadar Advisor...

CVE-2019-4672

IBM QRadar Advisor (1.1–2.5) is affected by CVE-2019-4672. The root issue is information exposure: an unauthorized attacker can obtain sensitive information via specially crafted HTTP requests, potentially aiding further attacks. Affected product: QRadar Advisor with Watson App for QRadar SIEM. R...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4672)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4672 advisory. - Bluetooth: hidp: fix buffer overflow Young Xiao Orabug: 29786787 CVE-2011-1079 CVE-2019-11884 - x86/speculation/mds: Fix verw usage to use memory...

LogonTracer - Investigate Malicious Windows Logon By Visualizing And Analyzing Windows Event Log

Investigate malicious logon by visualizing and analyzing Windows active directory event logs. Concept LogonTracer associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which account login attempt occur...

CVE-2017-4672

...

CVE-2017-4672

CVE-2017-4672 is rejected/not used per the initial description.

CVE-2016-4672

CVE-2016-4672 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2014-4672

CVE-2014-4672 affects Yii PHP Framework 1.1.14: the CDetailView widget’s value property can be exploited to execute arbitrary PHP scripts on the server. Public documents state the issue arises when user input is used to configure the value attribute, enabling remote code execution. A fix was rele...

CVE-2013-4672

Symantec Web Gateway (SWG)

SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway

SEC Consult Vulnerability Lab Security Advisory 20130726-0 ======================================================================= title: Multiple vulnerabilities - Surveillance via Symantec Web Gateway product: Symantec Web Gateway vulnerable version: = 5.1.0. fixed version: 5.1.1 CVE number:...

CVE-2011-4672

CVE-2011-4672 affects Valid tiny-erp

CVE-2010-4672

CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...

CVE-2009-4672

CVE-2009-4672 : A Local File Inclusion vulnerability in WP-Lytebox 1.3 for WordPress is caused by improper filtering of the pg parameter in main.php, enabling remote attackers to include and potentially execute arbitrary local PHP files. Affected product: WP-Lytebox WordPress plugin (version 1.3)...

CVE-2009-4672

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8791...

CVE-2008-4672

CVE-2008-4672 is a cross-site scripting (XSS) flaw in the buymyscripts Lyrics Script, specifically in search_results.php where an attacker can inject arbitrary script/HTML via the k parameter. The connected documents confirm the vulnerable component and parameter, but do not provide concrete deta...

CVE-2008-4672

creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32431...

QuickTime PICT image UncompressedQuickTimeData buffer overflow

Added: 11/19/2007 CVE: CVE-2007-4672 BID: 26344 OSVDB: 38547 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow vulnerability in QuickTime allows command execution when a user opens a specially crafted PICT image containing an invalid...