75 matches found
CVE-2023-4718
CVE-2023-4718 affects Font Awesome 4 Menus for WordPress. The vulnerability is a Stored XSS via the fa and fa-stack shortcode attributes in versions
K14930: PHP vulnerability CVE-2011-4718
Security Advisory Description Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID. CVE-2011-4718 Impact None Security Advisory Status To determine if your release is known to be vulnerable, the...
CVE-2022-4718
creationtimestamp| type| source ---|---|--- 2023-01-23 18:25:20+00:00| seen| https://t.me/cibsecurity/56848...
CVE-2022-4718 Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode
The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-4718
The CVE-2022-4718 entry concerns the Landing Page Builder WordPress plugin prior to 1.4.9.9. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before echoing them in the page, enabling Stored Cross-Site Scripting via attacker-controlled shortcod...
CVE-2022-4718 Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode
The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2013-4718
Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search...
CVE-2013-4718
CVE-2013-4718 describes a cross-site scripting (XSS) vulnerability in the Open Ticket Request System (OTRS) ITSM components. Affected are OTRS ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7. The issue allows remote authenticated users to inject arbitrary web script or HTML t...
Ubuntu 16.04 LTS / 18.04 LTS : fastd vulnerability (USN-4718-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4718-1 advisory. It was discovered that fastd incorrectly handled certain packets. An attacker could possibly use this issue to cause a denial of service. Tenable has...
CVE-2020-4718
creationtimestamp| type| source ---|---|--- 2020-11-19 18:41:35+00:00| seen| https://t.me/cibsecurity/16589...
CVE-2020-4718
IBM Jazz Reporting Service (JRS) versions 6.0.6, 6.0.6.1, 7.0, and 7.0.1 are affected by CVE-2020-4718: a stored cross-site scripting vulnerability in the Web UI that could lead to credentials disclosure within a trusted session. The root cause is a vulnerability in the Report Builder shipped wit...
Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2020-4718)
Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4718 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...
Debian: Security Advisory (DSA-4718-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4718-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4718. The text...
CVE-2019-4718
IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123...
Security Bulletin: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI (CVE-2019-4718)
Summary IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI CVE-2019-4718 Vulnerability Details CVEID: CVE-2019-4718 DESCRIPTION: IBM Jazz for Service Management is vulnerable to cross-site...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-2546)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-16607
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation...