52 matches found
CVE-2023-4707
Infosoftbd Clcknshop 1.0.0 is affected. Vulnerability exists in /collection/all; manipulating GET parameter q triggers reflected cross-site scripting (XSS). Exploitation is described as possible remotely; some sources imply potential for session or credential exposure, though explicit exploit det...
CVE-2022-4707
creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:42+00:00| seen| https://t.me/cibsecurity/56246...
CVE-2022-4707
The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59. This is due to missing nonce validation in the 'wprcreatemegamenutemplate' AJAX function. This allows unauthenticated attackers to create Mega Menu templates,...
CVE-2022-4707
CVE-2022-4707 affects WordPress Royal Elementor Addons prior to 1.3.60. The issue is a Cross-Site Request Forgery due to missing nonce validation in the wpr_create_mega_menu_template AJAX function, allowing unauthenticated attackers to cause Mega Menu template creation if a user (admin) is convin...
WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Cross Site Request Forgery (CSRF)
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4707 Patch priority Low CVSS severity Low 4.3 Developer WProyal PSID d1eebd7ac349 Credits Ramuel Gall Require...
CVE-2020-4707
creationtimestamp| type| source ---|---|--- 2021-08-04 19:24:27+00:00| seen| https://t.me/cibsecurity/26812...
Ubuntu: Security Advisory (USN-4707-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : TCMU vulnerability (USN-4707-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4707-1 advisory. It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY...
Debian DSA-4707-1 : mutt - security update
Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Mutt mail client, which could enable MITM attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4707. The...
CVE-2015-4707
Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...
CVE-2015-4707
Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...
CVE-2015-4707
CVE-2015-4707 affects IPython prior to 3.2, where JSON error messages and the /api/notebooks REST API could trigger cross-site scripting (XSS) via URL parameters in error responses. Affected component: IPython notebook REST API. Root cause: improper handling/neutralization of data in error messag...
CVE-2014-4707
CVE-2014-4707 affects Huawei Campus S7700/S9300/S9700 switches (firmware versions listed in the initial entry). The vulnerability allows unauthorized users to upgrade the bootrom/bootload software and bypass Menu protection, enabling a Menu compromise attack or bypass of Menu/upgrade protection. ...
CVE-2016-4707
CVE-2016-4707 affects CFNetwork in Apple iOS <10 and macOS
Security Advisory- BootRom Menu and Boot Menu Vulnerabilities on Huawei Campus Switches
Some versions of Huawei Campus S7700/S9300/S9700 switches are affected by the BootRom and Boot Menu vulnerability. 1. Unauthorized users are allowed to upgrade the bootrom or bootload software. Vulnerability ID: HWPSIRT-2014-0315 2. The BootRom Menu vulnerability allows unauthorized users to bypa...
CVE-2013-4707
CVE-2013-4707 affects D-Link DES-3810 Series: SSH implementation flaw allows a remote authenticated user to cause a denial-of-service (device hang) by leveraging login access. Affected firmware: before R2.20.011. Mitigation: upgrade to R2.20.011 or later. The vulnerability is confirmed in multipl...
CoDeSys Gateway Service < 2.3.9.27 Multiple Vulnerabilities
Binary data scadacodesysgateway23927.nbin...
CVE-2012-4707
The CVE-2012-4707 issue affects the 3S CODESYS Gateway-Server up to version 2.3.9.27. It is described as an "Improper Restriction of Operations Within the Bounds of a Memory Buffer" vulnerability, where an out-of-bounds memory access could allow remote attackers to execute arbitrary code. Public ...
CVE-2011-4707
Multiple cross-site scripting XSS vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the 1 instname parameter to the VsiTestScan servlet and 2 name parameter to the VsiTestServlet servlet...