RHSA-2024:4831

creationtimestamp| type| source ---|---|--- 2025-07-23 19:38:08+00:00| seen| Telegram/yffDVxtiYaWwp3UyhuKhfb81Vl84aAOxSkdR3j5tCAnhVI 2025-07-23 19:38:10+00:00| seen| Telegram/Z7GZ2soo4ViW5NZyzRRQZlKusmv2Mjo3A7qQ1avVutxUd6Q 2025-07-30 14:46:08+00:00| seen|...

CVE-2022-4831

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which...

CVE-2013-4831

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2011-4831

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

CVE-2025-4831

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4831

creationtimestamp| type| source ---|---|--- 2025-05-17 18:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpf73s3kwu2s 2025-05-17 20:26:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfeusggvh62...

CVE-2025-4831

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4831 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4831 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

Ubuntu 18.04 ESM : OpenMPT vulnerabilities (USN-4831-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4831-1 advisory. It was discovered that OpenMPT incorrectly handled certain files. A remote attacker could possibly use this issue to cause a denial of service or other...

CVE-2023-4831

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914...

CVE-2023-4831 SQLi in nCep

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914...

CVE-2023-4831 SQLi in nCep

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914...

CVE-2023-4831

CVE-2023-4831 affects Ncode Ncep prior to 20230914. The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands. Impact is high for confidentiality, integrity, and availability. Remediation: upgrade Ncep to a version released after 20230914 or apply...

CVE-2018-4831

creationtimestamp| type| source ---|---|--- 2023-09-14 22:41:04+00:00| seen| https://t.me/cibsecurity/70536...

CVE-2018-4831

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4831 Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which...

CVE-2022-4831

The CVE-2022-4831 issue affects the WordPress plugin Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro

Ubuntu: Security Advisory (USN-4831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Custom User Profile Fields Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Software Custom User Profile Fields Type Plugin Vulnerable versions = 1.8 Fixed in 1.8.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4831 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 02766634c7d2 Credits István...