51 matches found
CVE-2022-4712
The WP Cerber Security plugin for WordPress is vulnerable to stored cross-site scripting via the log parameter when logging in to the site in versions up to, and including, 9.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute wheneve...
CVE-2022-4712 WP Cerber Security <= 9.1 - Unauthenticated Stored Cross-Site Scripting
The WP Cerber Security plugin for WordPress is vulnerable to stored cross-site scripting via the log parameter when logging in to the site in versions up to, and including, 9.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute wheneve...
CVE-2022-4712
The CVE-2022-4712 entry applies to the WordPress WP Cerber Security plugin (versions up to 9.1). The vulnerability is a stored cross-site scripting (XSS) in the log parameter during login, exploitable by unauthenticated attackers. Impact: injected scripts execute in pages accessed by users, with ...
CVE-2018-4712
Rejected reason: This candidate is unused by its CNA...
Oracle Linux 8 : subversion:1.10 (ELSA-2020-4712)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4712 advisory. - In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request...
CVE-2023-4712
CVE-2023-4712 affects Xintian Smart Table Integrated Management System v5.6.9. The vulnerability resides in SysManage/AddUpdateRole.aspx, where manipulating the txtRoleName parameter enables SQL injection. The exploit has been disclosed publicly. Remediation/workaround information from PT-SECURIT...
CVE-2023-4712 Xintian Smart Table Integrated Management System AddUpdateRole.aspx sql injection
A vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unknown part of the file /SysManage/AddUpdateRole.aspx. The manipulation of the argument txtRoleName leads to sql injection. The exploit has been disclosed to th...
Moxa EDR-G903 series Hard-coded Credentials (CVE-2012-4712)
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Ubuntu: Security Advisory (USN-4712-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel regression (USN-4712-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4712-1 advisory. USN-4576-1 fixed a vulnerability in the overlay file system implementation in the Linux kernel. Unfortunately, that fix introduced a regression that...
Debian DSA-4712-1 : imagemagick - security update
This update fixes multiple vulnerabilities in Imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed image files are processed. C Tenable Netwo...
CVE-2017-4712
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4712
CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds write via a crafted app...
CVE-2016-4712
CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...
About the security content of tvOS 10
About the security content of tvOS 10 This document describes the security content of tvOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
CVE-2013-4712
Affected products: I-O DATA DEVICE HDL-A and HDL2-A series. Vulnerability: improper session management in firmware 1.07 and earlier, enabling a remote attacker to impersonate a user and disclose or modify data via unspecified vectors. Impact and scope: remote unauthenticated access with partial c...
CVE-2012-4712
CVE-2012-4712 affects Moxa EDR-G903 series routers. Root cause: a hard-coded account present in firmware prior to version 2.11, enabling remote attackers to obtain unspecified device access via unknown vectors. Impact: potential unauthorized access to the router, with confidentiality/integrity co...