67 matches found
CVE-2023-4758 Buffer Over-read in gpac/gpac
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4758
CVE-2023-4758 affects gpac prior to 2.3-DEV. The connected PT-2023-5252 entry describes a stack-based buffer overflow in the gpac multimedia platform, specifically in the gf_bt_check_line function in scene_manager/loader_bt.c:408, which can be exploited to cause a denial of service (crash). Remed...
CVE-2022-4758
creationtimestamp| type| source ---|---|--- 2023-01-23 18:25:16+00:00| seen| https://t.me/cibsecurity/56844...
CVE-2022-4758 10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode
The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-4758
CVE-2022-4758 affects the WordPress plugin 10WebMapBuilder (pre-1.0.72). The issue: the plugin does not validate/escape certain shortcode attributes before output, enabling Stored XSS from users with as low as a contributor to targets with admin privileges. Affected: 10WebMapBuilder WordPress plu...
CVE-2022-4758 10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode
The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
WordPress 10Web Map Builder for Google Maps Plugin < 1.0.72 is vulnerable to Cross Site Scripting (XSS)
Software 10Web Map Builder for Google Maps Type Plugin Vulnerable versions 1.0.72 Fixed in 1.0.72 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4758 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 6eb19701ed4e Credits...
opencryptoki bug fix and enhancement update
An update is available for opencryptoki. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The opencryptoki packages contain version 2.11 of the PKCS11 API,...
Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...
CVE-2 0 1 6-4 7 5 8:for Safari browser UXSS vulnerability analysis-vulnerability warning-the black bar safety net
! Foreword In this article, I'm ready to share with you about Vulnerability CVE-2 0 1 6-4 7 5 8 details. This vulnerability is a Safari in a UXSS vulnerability. The so-called UXSS, i.e., a universal cross-site scripting attacks. Currently, Apple has in Safari 1 0. fixes this vulnerability. The...
Apple iTunes Multiple Vulnerabilities (Sep 2016) - Windows
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
CVE-2016-4758
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site...
CVE-2016-4758
CVE-2016-4758 affects WebKit components in Apple iOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. It is a permissions-based information disclosure vulnerability related to access to the location variable in WebKit that could leak sensitive data when visiting crafted sit...
CVE-2015-4758
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...
CVE-2015-4758
Technical details for CVE-2015-4758 are not publicly provided in the supplied documents; monitor for updates from Oracle and associated security bulletins.
CVE-2014-4758
IBM Business Process Manager BPM 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL...
CVE-2013-4758
Double free vulnerability in the writeDataError function in the ElasticSearch plugin omelasticsearch in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted...
CVE-2013-4758
Double free vulnerability in the writeDataError function in the ElasticSearch plugin omelasticsearch in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted...
CVE-2013-4758
CVE-2013-4758 describes a double‑free memory corruption in the rsyslog omelasticsearch plugin (ElasticSearch plugin) within rsyslog when the errorfile parameter is set for local logging. The underlying issue is in writeDataError, affecting rsyslog versions up to 7.4.1 (stable) and up to 7.5.1 (de...