65 matches found
CVE-2023-4719
The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the listtype parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web...
CVE-2023-4719
The CVE-2023-4719 entry concerns the WordPress Simple Membership plugin. A Reflected Cross‑Site Scripting (XSS) flaw exists in versions up to 4.3.5 via the list_type parameter, caused by insufficient input sanitization and output escaping. Unauthenticated attackers could inject scripts into pages...
WordPress Simple Membership Plugin <= 4.3.5 is vulnerable to Cross Site Scripting (XSS)
Software Simple Membership Type Plugin Vulnerable versions = 4.3.5 Fixed in 4.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4719 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2b9d405c3f7b Credits FearZzZz Require...
CVE-2022-4719
creationtimestamp| type| source ---|---|--- 2022-12-27 18:13:37+00:00| seen| https://t.me/cibsecurity/55415 2025-04-09 20:48:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11159...
CVE-2022-4719
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5...
CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5...
CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5...
CVE-2022-4719
CVE-2022-4719 concerns RDiffWeb (GitHub: ikus060/rdiffweb) with Business Logic Errors in versions prior to 2.5.5 . The connected materials consistently identify the issue type as business logic, affecting pre-2.5.5 builds. A remediation is to upgrade to version 2.5.5 or later . The sources do not...
CVE-2020-4719
creationtimestamp| type| source ---|---|--- 2021-03-02 20:44:38+00:00| seen| https://t.me/cibsecurity/24354...
CVE-2020-4719
The CVE-2020-4719 vulnerability affects IBM Cloud APM 8.1.4 servers, where the APM server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration. This could allow an authenticated user with admin authorization to create DNS query strings...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ca-certificates update (USN-4719-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4719-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the...
IBM MQ 7.1 / 7.5 / 8.0 < 8.0.0.14 / 9.0 < 9.0.0.9 / 9.1 < 9.1.0.4 / 9.1 < 9.1.4 (1136608)
The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. Note that Nessus has no...
CVE-2015-4719
creationtimestamp| type| source ---|---|--- 2020-09-24 07:55:15+00:00| seen| https://t.me/cibsecurity/14868...
CVE-2015-4719
CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...
Security Bulletin: IBM MQ Appliance could allow a local attacker to obtain sensitive information. (CVE-2019-4719)
Summary IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. Vulnerability Details CVEID: CVE-2019-4719 DESCRIPTION: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker t...
CVE-2019-4719
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data...
CVE-2019-4719
CVE-2019-4719 : IBM MQ and IBM MQ Appliance could allow a local attacker to obtain sensitive information via inclusion of sensitive data within runmqras data. The issue affects IBM MQ/Appliance across multiple versions (e.g., 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, 9.1 CD; Appliance 8.0, 9.1 LTS, 9.1 CD...
CVE-2019-4719
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data...
Security Bulletin: IBM MQ and IBM MQ Appliance could allow a local attacker to obtain sensitive information. (CVE-2019-4719)
Summary IBM MQ and IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. Vulnerability Details CVEID: CVE-2019-4719 DESCRIPTION: IBM MQ could allow a local attacker to obtain sensitive information by inclusion of sensiti...