91 matches found
Fedora 38 : vim (2023-5f29c4709a)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5f29c4709a advisory. - patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750 Tenable has extracted the preceding...
CVE-2023-4750
creationtimestamp| type| source ---|---|--- 2023-09-04 18:21:16+00:00| seen| https://t.me/cibsecurity/69798...
CVE-2023-4750
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
AZL-28658 CVE-2023-4750 affecting package vim for versions less than 9.0.1897-1
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
CVE-2023-4750
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
CVE-2023-4750
CVE-2023-4750 is a Use After Free in Vim (vim/vim) prior to version 9.0.1857. The connected sources confirm this CVE is associated with Vim and cite a use-after-free issue before the 9.0.1857 patch level. The metrics in the CVE entry indicate a high impact (CVSS base score 7.8; LOCAL exploitabili...
CVE-2023-4750 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
CVE-2023-4750
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
CVE-2023-4750
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
CVE-2022-4750
The CVE-2022-4750 entry concerns the WP Responsive Testimonials Slider And Widget WordPress plugin (versions 1.5 and earlier). Affected component: shortcode attributes output; root cause: lack of validation/escaping of shortcode attributes before rendering in pages/posts. Impact: stored cross-sit...
CVE-2022-4750 WP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS
The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...
WordPress WP Responsive Testimonials Slider And Widget Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software WP Responsive Testimonials Slider And Widget Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4750 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 98b84c639eda...
RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.9] 0-day (Important) (RHSA-2021:4750)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4750 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...
Ubuntu: Security Advisory (USN-4750-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2020-26932
debian/sympa.postinst for the Debian Sympa package before 6.2.40dfsg-7 uses mode 4755 for sympanewaliases-wrapper, whereas the intended permissions are mode 4750 for access by the sympa group...
UBUNTU-CVE-2020-26932
debian/sympa.postinst for the Debian Sympa package before 6.2.40dfsg-7 uses mode 4755 for sympanewaliases-wrapper, whereas the intended permissions are mode 4750 for access by the sympa group...
Debian DSA-4750-1 : nginx - security update
It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4750. The te...
CVE-2019-4750
IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 173310...
CVE-2019-4750
CVE-2019-4750 affects IBM Cloud App Management versions 2019.3.0 and 2019.4.0 and is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, authorized actions on behalf of a trusted user. The IBM Security Bulletin documents the affected productVersion...
Security Bulletin: IBM Cloud App Management is vulnerable to cross-site request forgery (CVE-2019-4750)
Summary IBM Cloud App Management is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. This vulnerability has been addressed by IBM Cloud App Management in a later version...