CVE-2022-4832

The CVE-2022-4832 entry applies to the Store Locator WordPress plugin prior to version 1.4.9. The underlying issue is failure to validate/escape certain shortcode attributes, allowing Stored XSS. The attack can be executed by users with as little as Contributor privileges to target higher-privile...

CVE-2022-4832 Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

WordPress Store Locator WordPress Plugin < 1.4.9 is vulnerable to Cross Site Scripting (XSS)

Software Store Locator WordPress Type Plugin Vulnerable versions 1.4.9 Fixed in 1.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4832 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 643ae0b35cd8 Credits István Márto...

CVE-2020-4832

creationtimestamp| type| source ---|---|--- 2021-02-05 18:35:20+00:00| seen| https://t.me/cibsecurity/23167...

CVE-2020-4832

PowerHA for IBM AIX (PowerHA System Mirror) CVE-2020-4832 is a local information-disclosure flaw in version 7.2 where a discovery failure allows reading sensitive data from temporary directories. The vulnerability is triggered locally (no user interaction) and affects confidentiality (partial to ...

Debian DSA-4832-1 : chromium - security update

Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2019-4832

...

CVE-2019-4832

CVE-2019-4832 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4832

CVE-2018-4832 affects Siemens SPPA-T3000 and related OpenPCS/WinCC/BATCH/Route Control components. The vulnerability stems from improper input validation in the RPC service, enabling a remote attacker with network access to cause a DoS in remote and local communication, requiring a reboot to rest...

CVE-2017-4832

CVE-2017-4832 entry is rejected/not used; does not represent an active vulnerability.

CVE-2017-4832

...

CVE-2016-4832

WAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates...

CVE-2016-4832

The WAON Service App for Android (version 1.4.1 and earlier) fails to verify SSL server certificates, enabling potential MITM eavesdropping on encrypted connections. This vulnerability is documented by multiple sources (e.g., JVNDB-2016-000124 and JVN #68364327) and is tied to the WAON Android ap...

CVE-2016-4832

WAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates...

CVE-2015-4832

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI...

CVE-2015-4832

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI...

CVE-2015-4832

CVE-2015-4832 describes an unspecified vulnerability in the Oracle Identity Manager (OIM) component of Oracle Fusion Middleware, specifically in the OIM Legacy UI subcomponent. The affected software versions are Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3. The vulnerability is state...

CVE-2014-4832

IBM QRadar family (SIEM, Risk Manager, Vulnerability Manager) versions 7.1 MR2 before patch 9 and 7.2 before patch 1, plus 7.2.x before 7.2.4 Patch 1, are affected by CVE-2014-4832. Description: a remote attacker could obtain sensitive cookie information by sniffing unencrypted HTTP traffic durin...

CVE-2010-4832

The CVE-2010-4832 issue affects Android OS prior to 2.2, where an incorrect SSL certificate may be displayed in certain cases, allowing remote attackers to spoof trusted sites. The root cause is that certificate verification could be performed against the certificate of the last loaded resource o...

CVE-2013-4832

Summary of CVE-2013-4832 (HP Service Manager) Affected products: HP Service Manager versions 9.30 through 9.32. The vulnerability allows remote authenticated users to obtain sensitive information via unspecified vectors. The issue is documented with a NVD CVSS v2 base score of 4.0 (Medium) and ve...