99 matches found
CVE-2023-4819
The CVE-2023-4819 entry concerns the Shared Files WordPress plugin prior to version 1.7.6. Affected component: the upload handling (Content-Type header) for uploaded files. Root cause: the plugin does not return the correct Content-Type, enabling an attacker to upload an allowed file extension th...
CVE-2023-4819 Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts...
CVE-2018-4819
Rejected reason: This candidate is unused by its CNA...
Oracle Linux 7 : kernel (ELSA-2023-4819)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4819 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - x86/cpu/amd: Add a Zenbleed fix Waiman Long 2226841 CVE-2023-20593 - x86/cpu/amd: Move the...
CVE-2022-4819
creationtimestamp| type| source ---|---|--- 2022-12-29 00:31:46+00:00| seen| https://t.me/cibsecurity/55515...
CVE-2022-4819
CVE-2022-4819 concerns HotCRP with a cross-site scripting vulnerability. Documents consistently identify HotCRP as affected and describe an XSS issue arising from unknown functionality, with the attack potentially launched remotely. A patch hash is cited (d4ffdb0ef806453c54ddca7fdda3e5c60356285c)...
CVE-2022-4819 HotCRP cross site scripting
A vulnerability was found in HotCRP. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is d4ffdb0ef806453c54ddca7fdda3e5c60356285c. It is recommended to...
SUSE: Security Advisory (SUSE-SU-2016:0121-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4819-1 : kitty - security update
Stephane Chauveau discovered that the graphics protocol implementation in Kitty, a GPU-based terminal emulator, did not sanitise a filename when returning an error message, which could result in the execution of arbitrary shell commands when displaying a file with cat. C Tenable Network Security,...
Security Bulletin: Websphere Message Broker and IBM Integration Bus are affected by error handling vulnerability
Summary WebSphere Message Broker and IBM Integration Bus; web user interface error page returns detailed error information. Vulnerability Details CVE-ID: CVE-2014-4819 CVSS Base Score: 4 CVSS Temporal Score: See for the current score CVSS Environmental Score: Undefined CVSS Vector:...
CVE-2019-4819
CVE-2019-4819 is rejected/not used and does not represent an active vulnerability entry.
Security Bulletin: In IBM InfoSphere Information Server, the Information Services Catalog interface is vulnerable to various web UI vulnerabilities (CVE-2013-3034, CVE-2013-4057, CVE-2013-4059, CVE-2012-4819)
Summary The Information Services Catalog interface of the IBM InfoSphere Information Server web console is exposed to various well known web UI vulnerabilities: phishing through frames, cacheable SSL pages, link injection, cross-site request forgery and cross-site scripting. Vulnerability Details...
CVE-2017-4819
CVE-2017-4819 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
MariaDB 10.0.0 < 10.0.21 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.21 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via...
Moderate: Red Hat Security Advisory: mariadb55-mariadb security update
An update for mariadb55-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2016-4819
The printfDx function in Takumi Yamada DX Library for Borland C++ 3.13f through 3.16b, DX Library for Gnu C++ 3.13f through 3.16b, and DX Library for Visual C++ 3.13f through 3.16b allows remote attackers to execute arbitrary code via a crafted string...
CVE-2016-4819
CVE-2016-4819 covers a vulnerability in the printfDx function across the Takumi Yamada DX Library family for Borland C++, Gnu C++, and Visual C++ (Ver 3.13f to 3.16b). A crafted string passed to printfDx may allow remote code execution in applications built with these libraries. The issue is expo...
Oracle: Security Advisory (ELSA-2016-0534)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...