73 matches found
CVE-2018-4704
Rejected reason: This candidate is unused by its CNA...
CVE-2023-4704
creationtimestamp| type| source ---|---|--- 2023-09-01 14:14:05+00:00| seen| https://t.me/cibsecurity/69636...
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4704
CVE-2023-4704 affects instantsoft/icms2 prior to 2.16.1-git, where an External Control of System or Configuration Setting vulnerability exists in the GitHub-hosted project. The Red Hat/NVD entries confirm the issue as an external control of configuration settings, enabling an attacker with networ...
RHEL 8 : subscription-manager (RHSA-2023:4704)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4704 advisory. The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat...
CVE-2022-4704
creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:48+00:00| seen| https://t.me/cibsecurity/56249 2023-01-10 20:28:50+00:00| seen| https://t.me/cibsecurity/56251...
Improper access control
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfinalsettingssetup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset...
CVE-2022-4704
Summary of confirmed details: The Royal Elementor Addons plugin for WordPress is vulnerable via the wpr_import_templates_kit AJAX action, with affected versions up to and including 1.3.59. The issue is insufficient access control, allowing any authenticated user (including subscriber-level) to im...
WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4704 Patch priority Medium CVSS severity Medium 5.4 Developer WProyal PSID 11224a1dc02d Credits Ramuel Gall Required...
CVE-2014-4704
CVE-2014-4704 is associated with a DoS vulnerability in Huawei devices (Campus Switch, AR, SRG, WLAN). The flaw in the RADIUS component allows a remote, authenticated attacker to send malformed RADIUS packets to trigger device restarts. Affected products and exact firmware versions are described ...
CVE-2020-4704
The CVE-2020-4704 entry affects IBM Content Navigator 3.0CD and is caused by a stored cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s security bulletin for Content Navigator ...
CVE-2019-4704
creationtimestamp| type| source ---|---|--- 2020-07-01 18:55:17+00:00| seen| https://t.me/cibsecurity/13191...
CVE-2019-4704
CVE-2019-4704 affects IBM Security Identity Manager Virtual Appliance versions 7.0.2 (also 7.0.1 per remediation) where authorization tokens and session cookies are missing the secure attribute. The root issue is cookie handling that allows cookies to be transmitted over insecure links (http), en...
Debian DSA-4704-1 : vlc - security update
A vulnerability was discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed video file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
CVE-2017-4704
CVE-2017-4704 is rejected/not used and does not represent an active vulnerability entry.
in.all.biz XSS vulnerability
Vulnerable URL: https://in.all.biz/search/enterprises//?q=457"onfocus=prompt'XSSposed' autofocus="=2134169=456 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4704 VIP website status:| Yes Coordinated Disclosure...