44 matches found
WordPress Post Category Image With Grid and Slider Plugin < 1.4.8 is vulnerable to Cross Site Scripting (XSS)
Software Post Category Image With Grid and Slider Type Plugin Vulnerable versions 1.4.8 Fixed in 1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4747 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID e6ed2518069c...
Ubuntu: Security Advisory (USN-4747-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Authentication mechanism vulnerability affects IBM Connect:Direct for UNIX (CVE-2020-4747)
Summary IBM Connect:Direct for UNIX can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. Vulnerability Details CVEID: CVE-2020-4747 DESCRIPTION: IBM Connect:Direct for UNIX can allow a local or remote user to obtain an authenticated CLI...
CVE-2020-4747
CVE-2020-4747 affects IBM Sterling Connect:Direct for UNIX (UNIX variants) including versions 4.2.0, 6.0.0, 6.1.0, and 4.3.0. The vulnerability arises from improper authentication methods that allow a local or remote user to obtain an authenticated CLI session (impact: confidentiality, integrity,...
Debian DSA-4747-1 : icingaweb2 - security update
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the process. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...
CVE-2019-4747
creationtimestamp| type| source ---|---|--- 2020-07-16 18:55:06+00:00| seen| https://t.me/cibsecurity/13501...
da119.co.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-953154 Security Researcher rajeshappsec Helped patch 114 vulnerabilities Received 4 Coordinated Disclosure badges Received 17 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting da119.co.kr website and...
CVE-2017-4747
CVE-2017-4747 is rejected/not used as stated in the description.
CVE-2016-4747
CVE-2016-4747 refers to a vulnerability in Apple iOS Mail prior to 10, where certificate handling could allow a network attacker to perform MITM to obtain mail credentials. The issue arises from how untrusted certificates are processed in Mail, enabling credential exposure via unspecified vectors...
CVE-2015-4747
CVE-2015-4747 affects Oracle Fusion Middleware’s Oracle Event Processing component (CEP) in versions 11.1.1.7 and 12.1.3.0. The vulnerability, described as an unspecified issue, allows remote attackers to impact confidentiality, integrity, and availability via CEP-related vectors. The NVD entry l...
CVE-2014-4747
IBM Sametime Classic Meeting Server 8.x up to 8.5.2.1 is affected by CVE-2014-4747, where a physically proximate attacker can read the HTML source in a victim’s browser to discover a meeting password hash. The vulnerability is described as a local issue arising from access to an unattended workst...
CVE-2013-4747
The CVE-2013-4747 issue affects TYPO3’s Accessible browse results for indexed search extension, versions up to 1.2.1. It describes a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The underlying root cause is n...
Mozilla Bugzilla信息泄露漏洞
CVE ID: CVE-2012-4747 Bugzilla是一个开源的缺陷跟踪系统，它可以管理软件开发中缺陷的提交，修复，关闭等整个生命周期。 Bugzilla在访问限制控制不足的web root下存放了敏感信息，通过直接请求，可允许远程攻击者读取extensions/下的template aka .tmpl文件和其他定制扩展文件，或docs/下的自定义文档文件。 0 Bugzilla 4.x Bugzilla 3.x Bugzilla 2.x 厂商补丁： Bugzilla -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2012-4747
Bugzilla vulnerability CVE-2012-4747: Bugzilla 2.x and 3.x (up to 3.6.11), 3.7.x, 4.0.x before 4.0.8, 4.1.x, 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root due to insufficient access control. This allows remote attackers to read (1) template...
CVE-2011-4747
Parallels Plesk Panel 10.3.1_build1013110726.09 is affected by CVE-2011-4747 due to a flaw in SSL configuration that allows use of weak ciphers through a crafted CipherSuite list, enabling remote attackers to defeat cryptographic protections. The vulnerability targets the billing system component...
CVE-2010-4747
CVE-2010-4747 affects WordPress through the Processing Embed Plugin 0.5, specifically the wordpress-processing-embed/data/popup.php component. The vulnerability is a reflected XSS via the pluginurl parameter, caused by insufficient input sanitization, allowing remote attackers to inject arbitrary...
CVE-2010-4747
creationtimestamp| type| source ---|---|--- 2010-12-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35066...
CVE-2009-4747
CVE-2009-4747 describes a remote file inclusion (RFI) vulnerability in All In One Control Panel (AIOCP) 1.4.001, specifically in public/code/cp_html2xhtmlbasic.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the page parameter, repr...