CVE-2022-4829

CVE-2022-4829 affects the WordPress plugin Show-Hide / Collapse-Expand (versions

CVE-2022-4829 Show-Hide / Collapse-Expand < 1.3.0 - Contributor+ Stored XSS via Shortcode

The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against...

WordPress Show-Hide / Collapse-Expand Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Show-Hide / Collapse-Expand Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4829 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID a608bae568e8 Credits István...

RHEL 8 : kernel (RHSA-2022:4829)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4829 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP...

RHEL 8 : OpenShift Container Platform 4.8.22 (RHSA-2021:4829)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4829 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Debian DSA-4829-1 : coturn - security update

A flaw was discovered in coturn, a TURN and STUN server for VoIP. By default coturn does not allow peers on the loopback addresses 127.x.x.x and ::1. A remote attacker can bypass the protection via a specially crafted request using a peer address of '0.0.0.0' and trick coturn in relaying to the...

CVE-2020-4829

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:28+00:00| seen| https://t.me/cibsecurity/19634 2020-12-11 02:37:32+00:00| seen| https://t.me/cibsecurity/19654 2020-12-11 03:25:21+00:00| seen| https://t.me/cibsecurity/19674 2020-12-11 04:25:16+00:00| seen| https://t.me/cibsecurity/196...

CVE-2020-4829

IBM AIX and VIOS are affected by CVE-2020-4829 due to a vulnerability in the ksu command. Affected: AIX 7.1, AIX 7.2, VIOS 3.1; vulnerable fileset level includes krb5.client.rte 1.16.1.0–1.16.1.2. Root-cause is exploitation of ksu to gain root privileges via local access. Remediation: available f...

CVE-2019-4829

CVE-2019-4829 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-4829

CVE-2017-4829 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-4829

...

CVE-2016-4829

DMM Movie Player App for Android before 1.2.1, and DMM Movie Player App for iPhone/iPad before 2.1.3 does not verify SSL certificates...

CVE-2015-4829

CVE-2015-4829 is rejected; refer to CVE-2016-0638 instead; this entry is not active.

CVE-2015-4829

...

Oracle: Security Advisory (ELSA-2010-0505)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4829

CVE-2014-4829 is a CSRF vulnerability in IBM QRadar family (SIEM, Risk Manager, Vulnerability Manager) affecting 7.1 MR2 before Patch 9 and 7.2 before 7.2.4 Patch 1. The flaw allows a remote attacker to hijack the authentication of arbitrary users via requests that insert XSS sequences. Connected...

[security bulletin] HPSBPI02892 rev.1 - Certain HP FutureSmart MFP, Weak PDF Encryption, Local Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03888014 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03888014 Version: 1 HPSBPI02892 rev....

CVE-2013-4829

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors...

CVE-2013-4829

CVE-2013-4829 affects several HP FutureSmart printers and MFPs: HP Color LaserJet M775dn, M775f, M775z, M775z+, HP LaserJet M725 (dn/f/z), M525c/f/dn, M575c, CM4540, and ScanJet Enterprise 8500fn1. The vulnerability allows local users to read images of arbitrary scanned documents via unspecified ...

Scientific Linux Security Update : perl-Archive-Tar on SL4.x, SL5.x i386/x86_64

Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. CVE-2007-4829 This package upgrades...