141 matches found
CVE-2018-4775
creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:56+00:00| seen| https://t.me/cibsecurity/70514...
CVE-2022-4775
The GeoDirectory WordPress plugin prior to version 2.2.22 is affected by a Stored XSS vulnerability caused by not validating/escaping certain shortcode attributes before output. This could allow a user with as little as Contributor privileges to inject payloads that impact higher-privilege users ...
CVE-2022-4775 GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...
WordPress GeoDirectory Plugin < 2.2.22 is vulnerable to Cross Site Scripting (XSS)
Software GeoDirectory Type Plugin Vulnerable versions 2.2.22 Fixed in 2.2.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4775 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7a04d6649370 Credits István Márton Require...
Debian: Security Advisory (DSA-4775-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4775
The connected IBM IBM Cúram/Curam vulnerability entry CVE-2020-4775 is an XSS issue that affects Curam Social Program Management versions 7.0.9 and 7.0.10. The IBM security bulletin corroborates the affected products/versions and describes the impact as attackers injecting malicious scripts into ...
Security Bulletin: A cross-site scripting (XSS) vulnerability may impact IBM Cúram Social Program Management (CVE-2020-4775)
Summary A cross-site scripting XSS vulnerability may impact IBM Cúram Social Program Management. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. Vulnerabili...
CVE-2019-4775
CVE-2019-4775 entry is rejected/not used; does not represent an active vulnerability entry.
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4775)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4775 advisory. - x86/speculation: Exclude ATOMs from speculation through SWAPGS Thomas Gleixner Orabug: 30165288 CVE-2019-1125 - x86/speculation: Enable Spectre v1 swapgs...
CVE-2017-4775
CVE-2017-4775 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4775
CVE-2016-4775: In watchOS 3, tvOS 10, and macOS Sierra (OS X) 10.12 and earlier, a Kernel memory-corruption issue allowed local privilege escalation via an untrusted pointer dereference. Apple’s security content notes that the vulnerability was addressed by removing the affected code in the Kerne...
About the security content of tvOS 10
About the security content of tvOS 10 This document describes the security content of tvOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4775
Technical details for CVE-2015-4775 are not provided in the connected EUVD entries or initial description. No affected products, vulnerable component, impact, or remediation are disclosed here. Monitor for official updates from Oracle and CVE records.
CVE-2013-4775
CVE-2013-4775 affects Netgear ProSafe switches (GS724Tv3/GS716Tv2, GS748Tv4, GS510TP, GS752TPS/GS728TPS, GS728TS/GS725TS, GS752TXS/GS728TXS) with specific firmware versions, allowing remote attackers to read the device’s startup-config and encrypted administrator credentials by requesting the fil...
NETGEAR ProSafe - Information Disclosure
NETGEAR ProSafe - Information Disclosure !/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php...
Netgear ProSafe - Information Disclosure
!/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sys, getopt, urllib2 version = "0.1"...
