78 matches found
CVE-2024-4727
Campcodes Legal Case Management System 1.0 is affected by a cross-site scripting vulnerability in the /admin/court-type file, caused by manipulation of the argument court_name. This could enable remote attacker execution of scripts in a victim’s browser. The vulnerability is publicly disclosed (V...
CVE-2018-4727
Rejected reason: This candidate is unused by its CNA...
CVE-2022-4727
creationtimestamp| type| source ---|---|--- 2023-02-08 22:28:00+00:00| seen| https://t.me/cibsecurity/55419...
CVE-2022-4727 OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting
A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the component Notes Handler. The manipulation...
CVE-2022-4727
The CVE-2022-4727 entry concerns OpenMRS Appointment Scheduling Module (versions up to 1.16.x). The vulnerability lies in the getNotes function of AppointmentRequest.java (Notes Handler), where manipulating the notes argument enables cross-site scripting. It can be triggered remotely. A fix is av...
Security Bulletin: IBM InfoSphere Information Server may be vulnerable to various cross-site injection attacks CVE-2019-4727
Summary Potential cross-site injection vulnerabilities were addressed in IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2019-4727 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip...
Ubuntu: Security Advisory (USN-4727-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel vulnerability (USN-4727-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4727-1 advisory. Alexander Popov discovered that multiple race conditions existed in the AFVSOCK implementation in the Linux kernel. A local attacker could use this to cause a...
CVE-2020-4727
CVE-2020-4727 affects IBM InfoSphere Information Server 11.7. A cross-frame scripting (clickjacking) vulnerability could let a remote attacker trick a user into visiting a malicious site and hijack the user’s click actions. Affected product: InfoSphere Information Server 11.7 (including Informati...
CVE-2016-4727
IOThunderboltFamily in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4727
CVE-2016-4727 relates to IOThunderboltFamily in Apple OS X prior to 10.12. Public sources (NVD and ZDI) describe a local-privilege-escalation/ memory-corruption vulnerability in the IOThunderboltFamily kernel extension. The ZDI advisory specifies the attacker must first run low-privileged code on...
CVE-2015-4727
Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console...
CVE-2015-4727
CVE-2015-4727 affects Oracle Virtualization Sun Ray Software Web Console. The CNVD entry specifies an unspecified vulnerability in Sun Ray Software Web Console prior to version 5.4.4, allowing a remote attacker to read, update, insert, or delete data and potentially cause a denial of service. Aff...
TP-LINK WDR4300 - Stored XSS & DoS
Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...
CVE-2014-4727
CVE-2014-4727 affects TP-LINK TL-WDR4300 (N750) routers. The vulnerability is a stored XSS in the DHCP clients page, exploitable via the hostname field in a DHCP request. If an administrator visits the affected web panel, injected script can execute in the browser. A DoS condition on the device w...
TP-LINK WDR4300 XSS / Denial Of Service
Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...
CVE-2013-4727
CVE-2013-4727 affects DDSN Interactive cm3 Acora CMS versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). Remote attackers can obtain sensitive information via Admin/top.aspx. Affected component is the CMS core (AcoraCMS), with information disclosure as the stated impact (CV...
CVE-2011-4727
The CVE-2011-4727 issue affects Parallels Plesk Panel 10.2.0_build1011110331.18: the Server Administration Panel mishandles string data intended for XML storage, enabling a remote attacker to trigger a parsing error via crafted REST URL parameters (e.g., to admin/ and related files), resulting in...