CVE-2024-4710

The UberMenu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ubermenu-col, ubermenumobileclosebutton, ubermenutoggle, ubermenu-search shortcodes in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user suppli...

CVE-2024-4710 Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

The UberMenu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ubermenu-col, ubermenumobileclosebutton, ubermenutoggle, ubermenu-search shortcodes in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user suppli...

CVE-2023-4710

creationtimestamp| type| source ---|---|--- 2023-09-02 00:14:11+00:00| seen| https://t.me/cibsecurity/69695...

CVE-2023-4710 TOTVS RM Portal cross site scripting

A vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-238573 was assigned t...

CVE-2023-4710

CVE-2023-4710 affects TOTVS RM 12.1, Portal component. The vulnerability stems from manipulation of the d argument, leading to cross-site scripting. The attack is capable of remote execution. Connected documents do not provide patch/version details or explicit remediation. Other references reiter...

CVE-2022-4710

creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:34+00:00| seen| https://t.me/cibsecurity/56241...

CVE-2022-4710 Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input sanitization and output escaping of the 'wprajaxsearchlinktarget' parameter in the 'datafetch' function. This makes it possibl...

CVE-2022-4710

The CVE-2022-4710 entry concerns the WordPress plugin Royal Elementor Addons (versions up to 1.3.59). The issue is a Reflected Cross-Site Scripting vulnerability in the wpr_ajax_search_link_target parameter within the data_fetch function, caused by insufficient input sanitization/output escaping....

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4710 Patch priority High CVSS severity High 6.1 Developer WProyal PSID 88dfeeb21d4c Credits Ramuel Gall Required...

Google Android Denial Of Service (CVE-2013-4710)

A denial of service vulnerability exists in Google Android. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...

Ubuntu: Security Advisory (USN-4710-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerability (USN-4710-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4710-1 advisory. Kiyin discovered that the perf subsystem in the Linux kernel did not properly deallocate memory in some situations. A privileged attacker could use th...

Debian DSA-4710-1 : trafficserver - security update

A vulnerability was discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service via malformed HTTP/2 headers. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4710)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4710 advisory. - fork: record starttime late David Herrmann Orabug: 29850581 CVE-2019-6133 - x86/retpoline/ia32entry: Convert to non-speculative calls Ankur Arora...

CVE-2017-4710

CVE-2017-4710 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-4710

...

CVE-2016-4710

CVE-2016-4710 affects Apple OS X WindowServer on macOS versions before 10.12. The issue is a local privilege-escalation due to a type-confusion vulnerability in WindowServer, linked to CoreGraphics data handling (as detailed in ZDI advisories ZDI-16-608 and ZDI-16-609). Local attackers with low p...

Cisco ACE Application Control Engine Detection

Detection of Cisco ACE Application Control Engine The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Cisco ACE 4710 Application Control Engine Denial of Service Vulnerability

A vulnerability in the SSL/TLS functions of the Cisco ACE 4700 Series Application Control Engine Appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco ACE30 Application Control Engine Module and ACE 4710 Application Control Engine Denial of Service Vulnerabilities

Cisco ACE30 Application Control Engine Module and Cisco ACE 4710 Application Control Engine are both next-generation load balancing and application delivery solutions from Cisco. A denial of service vulnerability exists in the Cisco ACE30 Application Control Engine Module and Cisco ACE 4710...