CVE-2023-4690 Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce validation on the eaesaveconfig function. This makes it possible for unauthenticated attackers to change configuration...

CVE-2023-4690

CVE-2023-4690 affects the Elementor Addon Elements plugin for WordPress (versions

Rocky Linux 8 : qt5-qtbase and qt5-qtwebsockets (RLSA-2020:4690)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4690 advisory. - Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue t...

CVE-2022-4690

CVE-2022-4690 is a stored XSS in usememos/memos prior to 0.9.0. An attacker could abuse the SVG upload/display feature by submitting a crafted SVG to execute script via the image link. Impact is stored XSS within memos prior to upgrade. Remediation: upgrade to version 0.9.0 or later; as a workaro...

Rockwell Automation MicroLogix Denial Of Service (CVE-2012-4690)

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits. This plugin...

CVE-2020-4690

creationtimestamp| type| source ---|---|--- 2021-09-23 20:30:26+00:00| seen| https://t.me/cibsecurity/29338...

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2021-20377, CVE-2020-4690)

Summary IBM Security Guardium has fixed these vulnerabilities Vulnerability Details CVEID: CVE-2021-20377 DESCRIPTION: IBM Security Guardium could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be...

CentOS 8 : qt5-qtbase and qt5-qtwebsockets (CESA-2020:4690)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4690 advisory. - qt: XML entity expansion vulnerability CVE-2015-9541 - qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages...

Ubuntu: Security Advisory (USN-4690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : coTURN vulnerability (USN-4690-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4690-1 advisory. It was discovered that coTURN allowed peers to connect and relay packets to loopback addresses in the range of 127.x.x.x. A malicious user...

CVE-2017-4690

...

CVE-2006-4690

...

CVE-2006-4690

CVE-2006-4690 entry is rejected/not used and does not represent an active vulnerability record.

CVE-2016-4690

CVE-2016-4690 affects Apple iOS prior to 10.2, specifically the Image Capture component: a validation issue in handling USB image devices (HID) could allow arbitrary code execution. The in-the-wild impact is supported by the Apple security content for iOS 10.2, which lists the Image Capture vulne...

CVE-2014-4876

Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows remote attackers to read potentially sensitive system environment variables via a crafted request to TCP port 54138...

Authentication flaw

Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows remote attackers to read potentially sensitive system environment variables via a crafted request to TCP port 54138...

CVE-2014-4876

CVE-2014-4876 affects Toshiba 4690 OS (version 6 Release 3) where the ADXSITCF logical name is not properly restricted. A remote, unauthenticated client can read system environment variables by sending a crafted request to TCP port 54138, enabling information disclosure. The vulnerability is desc...

Oracle: Security Advisory (ELSA-2008-0965)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for glpi FEDORA-2015-4690

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Toshiba 4690 Operating System Information Disclosure Vulnerability

Toshiba 4690 Operating System is an operating system from Toshiba. An information disclosure vulnerability exists in the Toshiba 4690 Operating System, which could be exploited by remote attackers to obtain sensitive information...