71 matches found
CVE-2024-4705
The CVE-2024-4705 entry concerns the WordPress Testimonials Widget plugin. It is a Stored Cross-Site Scripting vulnerability in the testimonials shortcode, present in all versions up to and including 4.0.4, caused by insufficient input sanitization and output escaping on user-supplied attributes....
CVE-2024-4705 Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
The Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials shortcode in all versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2018-4705
Rejected reason: This candidate is unused by its CNA...
CVE-2023-4705
Rejected reason: CVE-2023-4705 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team...
Design/Logic Flaw
Rejected reason: CVE-2023-4705 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team...
RHEL 8 : subscription-manager (RHSA-2023:4705)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4705 advisory. The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat...
CVE-2022-4705
creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:48+00:00| seen| https://t.me/cibsecurity/56249...
CVE-2022-4705
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfinalsettingssetup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset...
CVE-2022-4705 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfinalsettingssetup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset...
CVE-2022-4705
The CVE-2022-4705 entry concerns the WordPress plugin Royal Elementor Addons. Affected component: the wpr_final_settings_setup AJAX action (versions up to and including 1.3.59). Root cause: insufficient access control allowing any authenticated user (including subscribers) to finalize activation ...
WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4705 Patch priority Medium CVSS severity Medium 4.3 Developer WProyal PSID 52604a902691 Credits Ramuel Gall Required...
CVE-2021-20665
Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...
CVE-2021-20663
Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type 6.7.5 and earlier Movable Type 6.7 Series, Movable Type Premium 1.39 and...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Sudo vulnerabilities (USN-4705-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4705-1 advisory. It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue...
CVE-2020-4705
creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:57+00:00| seen| https://t.me/cibsecurity/16381...
CVE-2020-4705
CVE-2020-4705 affects IBM Sterling B2B Integrator (Standard Edition) 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.2. The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that can allow an attacker to embed arbitrary JavaScript, potentially enabling credential disclosure within a trusted sess...
CVE-2019-4705
creationtimestamp| type| source ---|---|--- 2020-07-01 18:55:16+00:00| seen| https://t.me/cibsecurity/13190...
CVE-2019-4705
CVE-2019-4705 affects IBM Security Identity Manager Virtual Appliance. The IBM Security bulletin lists this CVE as part of vulnerabilities affecting the 7.0.2 (and 7.0.1) releases, noting that it can disclose sensitive information to unauthorized users and potentially enable further attacks. Reme...
Debian: Security Advisory (DSA-4705-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
