CVE-2023-4728

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publishlp function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and abov...

CVE-2023-4728

CVE-2023-4728 concerns the LadiApp WordPress plugin. The issue is a missing capability check in publish_lp(), exposed via an AJAX action, allowing authenticated users with subscriber-level access or higher to modify the LadiPage key and create pages. This can enable stored XSS by pages created th...

CVE-2018-4728

Rejected reason: This candidate is unused by its CNA...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Graphite-Web vulnerabilities (USN-6243-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6243-1 advisory. It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked...

Debian: Security Advisory (DLA-3309-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3309 : graphite-web - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3309 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3309-1 [email protected]...

CVE-2022-4728

creationtimestamp| type| source ---|---|--- 2022-12-27 18:13:35+00:00| seen| https://t.me/cibsecurity/55413...

CVE-2022-4728

Summary of concrete details (CVE-2022-4728): The vulnerability affects Graphite-Web, specifically in the Cookie Handler component, enabling cross-site scripting via crafted inputs. It is triggered remotely and has public exploit information in the referenced sources. Affected/distributed advisori...

CVE-2022-4728

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : snapd vulnerability (USN-4728-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4728-1 advisory. Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for...

Ubuntu: Security Advisory (USN-4728-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4728

creationtimestamp| type| source ---|---|--- 2021-01-05 19:25:29+00:00| seen| https://t.me/cibsecurity/21582...

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this...

CVE-2019-4728

Summary: CVE-2019-4728 affects IBM Sterling B2B Integrator Standard Edition and versions 5.2.0.0–5.2.6.5_2, 6.0.0.0–6.0.3.2, and 6.1.0.0, due to deserialization of untrusted data that could allow a remote attacker to execute arbitrary code with SYSTEM privileges. The IBM security bulletin confirm...

Debian DSA-4728-1 : qemu - security update

Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4728. The text itself is copyright C...

CVE-2017-4728

...

CVE-2017-4728

CVE-2017-4728 is rejected/not used and does not represent an active vulnerability entry.

Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...

Apple iTunes Multiple Vulnerabilities (Sep 2016) - Windows

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

CVE-2016-4728

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site...