CVE-2022-4783 Youtube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode

The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...

CVE-2022-4783

The CVE-2022-4783 entry covers the WordPress plugin Youtube Channel Gallery (versions up to and including 2.4). The vulnerability arises from not validating/escaping certain shortcode attributes before they are output in pages/posts, enabling Stored XSS for users with the Contributor role or high...

WordPress Youtube Channel Gallery Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software Youtube Channel Gallery Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4783 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID d89263cd84d3 Credits István Márton...

CVE-2020-4783

creationtimestamp| type| source ---|---|--- 2020-11-23 20:45:57+00:00| seen| https://t.me/cibsecurity/16716...

CVE-2020-4783

CVE-2020-4783 affects IBM Spectrum Protect Plus versions 10.1.0–10.1.6. Root cause: failure to properly enable HTTP Strict Transport Security, enabling information disclosure via man-in-the-middle. Impact: remote attacker could obtain sensitive information over network (TLS/HTTPS). Affected produ...

Security Bulletin: IBM Spectrum Protect Plus allows use of TLS Version 1.1 protocols (CVE-2020-4783)

Summary IBM Spectrum Protect Plus should disable the use of TLS Version 1.1 protocols as this could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2020-4783 DESCRIPTION: IBM Spectrum Protect Plus could allow a remote attacker to obtain sensitive...

CVE-2019-4783

CVE-2019-4783 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-4783

...

CVE-2017-4783

CVE-2017-4783 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2017-4783

...

CVE-2012-4783

...

CVE-2012-4783

CVE-2012-4783 is rejected/not used and does not represent an active vulnerability entry.

SHAREit for Android Vulnerabilities

Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...

SHAREit for Android Vulnerabilities - Lenovo Support US

No description provided...

CVE-2016-4783

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2016-4783

LENOVO SHAREit for Android before 4.4 is affected by a UXSS/XSS vulnerability (CVE-2016-4783) in versions prior to 3.5.98_ww, allowing remote script/HTML injection via unspecified vectors. The issue is tied to SHAREit for Android on affected Android OS versions; Lenovo’s Lenovo-6421 advisory and ...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

CVE-2015-4783

Technical details about CVE-2015-4783 are not provided in the supplied documents. The connected EUVD entries mention malware but do not specify affected products, root cause, exploitation, vectors, or remediation for this CVE. Monitor for updates.

CVE-2014-4783

Cross-site request forgery CSRF vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-4783

The CVE-2013-4783 entry documents an authentication bypass in Dell iDRAC6/7: iDRAC6 firmware 1.x before 1.92, 2.x, and 3.x before 3.42, and iDRAC7 firmware before 1.23.23, allow remote attackers to bypass authentication and run arbitrary IPMI commands by using cipher suite 0 (cipher zero) with an...