WordPress WP ALL Export Pro Plugin < 1.8.6 is vulnerable to Remote Code Execution (RCE)

Software WP ALL Export Pro Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2023-4724 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 62d42aeded33 Credits Francesco Marano @mrnfrancesco Donato ...

WordPress Export any WordPress data to XML/CSV Plugin < 1.4.0 is vulnerable to Remote Code Execution (RCE)

Software Export any WordPress data to XML/CSV Type Plugin Vulnerable versions 1.4.0 Fixed in 1.4.0 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2023-4724 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 6a309d1d1825 Credits Francesco Marano...

CVE-2018-4724

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4724

creationtimestamp| type| source ---|---|--- 2022-12-27 18:13:25+00:00| seen| https://t.me/cibsecurity/55406...

CVE-2022-4724 Improper Access Control in ikus060/rdiffweb

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...

CVE-2022-4724 Improper Access Control in ikus060/rdiffweb

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...

CVE-2022-4724

The CVE-2022-4724 entry concerns the rdiffweb project by ikus060 and stems from improper access control in versions prior to 2.5.5. The NVD entry lists a base CVSSv3.1 score of 9.8 (CRITICAL) with NETWORK attack vector and high impact on confidentiality, integrity, and availability; CNA/other sou...

CVE-2022-4724 Improper Access Control in ikus060/rdiffweb

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...

CVE-2019-4724

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page. IBM X-Force ID: 172130...

CVE-2019-4724

CVE-2019-4724 affects IBM Cognos Analytics 11.0 and 11.1. The issue allows a remote attacker to obtain credentials from a user’s browser due to incorrect autocomplete settings on the New Content Backup page (authorization-related vulnerability). Public sources corroborate credential exposure risk...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenLDAP vulnerabilities (USN-4724-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4724-1 advisory. It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use...

CVE-2020-4724

CVE-2020-4724 affects IBM i2 Analyst’s Notebook (versions 9.2.0 and 9.2.1). The vulnerability is a memory corruption flaw that enables a local attacker to execute arbitrary code by persuading a user to open a specially crafted file, as documented in the IBM security bulletin for Analyst’s Noteboo...

CVE-2020-4724

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system...

Debian DSA-4724-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9802 Samuel Gross discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2020-9803 Wen Xu discovered that processing maliciously crafted web content may lea...

Debian: Security Advisory (DSA-4724-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4724

SQL injection vulnerability in Concrete5 5.7.3.1...

CVE-2015-4724

SQL injection vulnerability in Concrete5 5.7.3.1...

CVE-2015-4724

Concrete5

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-10951

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...