CVE-2023-4702

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

CVE-2018-4702

Rejected reason: This candidate is unused by its CNA...

CVE-2023-4702 Authentication Bypass in Digital Yepas

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

CVE-2023-4702 Authentication Bypass in Digital Yepas

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

CVE-2023-4702

CVE-2023-4702 affects Digital Yepas (Yepas Digital Yepas) prior to version 1.0.1. The issue is described as an Authentication Bypass via an Alternate Path or Channel, enabling bypass of authentication. The CVE is documented across multiple sources (NVD, CVE list, PRION/PT-Security entries, CNNVD,...

Oracle Linux 5 : kernel (ELSA-2019-4702)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4702 advisory. - x86/speculation/mds: Conditionally clear CPU buffers on idle entry Thomas Gleixner orabug 29821515 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127...

SUSE CVE-2014-4702

The checkicmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4701...

CVE-2022-4702

creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:44+00:00| seen| https://t.me/cibsecurity/56248...

CVE-2022-4702

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfixroyalcompatibility' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to deactivate every plugin on...

CVE-2022-4702 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfixroyalcompatibility' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to deactivate every plugin on...

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4702 Patch priority Medium CVSS severity Medium 5.4 Developer WProyal PSID 8642498f8aa2 Credits Ramuel Gall Required...

SUSE: Security Advisory (SUSE-SU-2014:1352-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Pound vulnerabilities (USN-4702-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4702-1 advisory. It was discovered that Pound incorrectly handled certain HTTP requests A remote attacker could use it to retrieve some sensitive information...

CVE-2019-4702

CVE-2019-4702 affects IBM Guardium Data Encryption (GDE) 3.0.0.2, where permissions on a security-critical resource allow read/modify by unintended actors. The issue is described as improper privilege control in GDE 3.0.0.2. Connected sources also indicate remediation: the vulnerability is fixed ...

CVE-2020-4702

CVE-2020-4702 affects IBM InfoSphere Information Server (11.7; InfoSphere Metadata Asset Manager). The vulnerability is a stored cross‑site scripting flaw in the Web UI that could allow an attacker to embed arbitrary JavaScript in the session, potentially leading to credential disclosure. IBM’s s...

Debian DSA-4702-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2017-4702

CVE-2017-4702 is rejected/not used as stated; this candidate number was not assigned to any issue.

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...