55 matches found
CVE-2022-4784
creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:47+00:00| seen| https://t.me/cibsecurity/58572 2025-03-14 14:45:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7560...
CVE-2022-4784
CVE-2022-4784 affects the Hueman Addons WordPress plugin (versions
CVE-2022-4784 Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode
The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Hueman Addons Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)
Software Hueman Addons Type Plugin Vulnerable versions = 2.3.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4784 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 1fa97030f882 Credits István Márton Required...
Siemens SIPROTEC Information Disclosure (CVE-2016-4784)
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...
Debian DSA-4784-1 : wordpress - security update
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting XSS or Cross-Site Request Forgery CSRF attacks, escalate privileges, run arbitrary code, and delete arbitrary...
CVE-2019-4784
CVE-2019-4784 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-4784
CVE-2017-4784 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Siemens SWT3000
CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SWT3000 Vulnerabilities: Improper Authentication, Authentication Bypass, Improper Input Validation. AFFECTED PRODUCTS Siemens reports that the vulnerabilities affect the following SWT 3000...
CVE-2016-4784
CVE-2016-4784 affects Siemens SIPROTEC SIPROTEC 4/Compact devices with EN100 Ethernet module and SIPROTEC Merging Unit 6MU80. The vulnerability is information disclosure via the integrated web server (port 80) when network access is possible, allowing remote attackers to obtain sensitive device i...
Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : SIPROTEC 4 and SIPROTEC Compact Vulnerabilities : Information Exposure 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-140-02...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4784
Technical details for CVE-2015-4784 are not publicly provided in the supplied documents. The initial description notes an unspecified local vulnerability in Oracle Berkeley DB 11.2.x/12.1.x; no affected versions, exploit info, impact specifics, or remediation are documented here. Monitor for upda...
CVE-2014-4784
IBM Initiate Master Data Service (versions 9.5 prior to 9.5.093013, 9.7 prior to 9.7.093013, 10.0 prior to 10.0.093013, and 10.1 prior to 10.1.093013) is affected by a frame-injection issue where FRAME elements were not properly restricted, enabling phishing attacks and potential access restricti...
CVE-2013-4784
The HP Integrated Lights-Out iLO BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 aka cipher zero and an arbitrary password...
CVE-2013-4784
The CVE-2013-4784 vulnerability affects HP iLO BMC implementations and enables remote attackers to bypass authentication and execute arbitrary IPMI commands by triggering cipher suite 0 (cipher zero) with any password. The issue is a cipher-zero authentication bypass over IPMI, allowing network-a...
CVE-2011-4784
The vulnerability CVE-2011-4784 affects the NVIDIA Stereoscopic 3D driver for Windows, with versions before 7.17.12.7565. Root cause: the driver does not properly handle commands sent to a named pipe, enabling local privilege escalation via a crafted application. Affected component: nvStereo Ster...