105 matches found
CVE-2023-4943
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to a missing capability check on the woobebulkoperationsvisibility function. This makes it possible for authenticated attackers subscriber or higher to manipulate products...
CVE-2023-4943
CVE-2023-4943 : BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net is affected by Missing Authorization to Product Manipulation up to version 1.1.3.3 due to a missing capability check in woobe_bulkoperations_visibility. The vulnerability allows authenticated user...
WordPress miniOrange's Google Authenticator Plugin <= 5.6.5 is vulnerable to Broken Access Control
Software miniOrange's Google Authenticator Type Plugin Vulnerable versions = 5.6.5 Fixed in 5.6.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4943 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 1f8ee97c6af1 Credits Ramuel Gal...
K15482: Linux kernel vulnerability CVE-2014-4943
Security Advisory Description The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. CVE-2014-4943 Impact None. No F5 products are affected by this...
SUSE CVE-2014-4943
The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket...
Security Bulletin: IBM Sterling Control Center is vulnerable to remote attack on MQXR service due to IBM WebSphere MQ (CVE-2015-4943)
Summary IBM WebSphere MQ is used by IBM Sterling Control Center. IBM WebSphere MQ could allow a remote attacker to crash the MQXR service, and the issue has been addressed. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR...
SUSE: Security Advisory (SUSE-SU-2014:1316-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4943-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4943
creationtimestamp| type| source ---|---|--- 2020-01-22 16:44:06+00:00| seen| https://t.me/cibsecurity/9343...
CVE-2011-4943
ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution fixed in v1.0.13...
CVE-2011-4943
ImpressPages CMS v1.0.12 is affected by an Unspecified Remote Code Execution vulnerability, with a fix released in v1.0.13. The CVE entry (CVE-2011-4943) is documented with high NVD scores (CVSSv2 base 7.5, CVSSv3 base 9.8) indicating network-based, unauthenticated remote code execution that coul...
CVE-2019-4943
CVE-2019-4943 is rejected/not used and does not represent an active vulnerability entry.
Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942)
Summary A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of...
APSB18-15 Security update available for the Adobe PhoneGap Push plugin
Adobe has released an update for the Adobe PhoneGap Push plugin. This update resolves a Same-Origin Method Execution SOME vulnerability CVE-2018-4943 that exists in PhoneGap apps built with the affected version of the Push plugin. This vulnerability could be exploited to trick users of PhoneGap...
VMware vCenter Server Appliance 6.5 < 6.5 U1d Local Privilege Escalation (VMSA-2017-0021)
The version of VMware vCenter Server Appliance installed on the remote host is 6.5 prior to 6.5 Update 1d 6.5 U1d. It is, therefore, affected by a local privilege escalation vulnerability in the 'showlog' plugin. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105514;...
CVE-2017-4943
CVE-2017-4943 affects VMware vCenter Server Appliance (vCSA) 6.5 prior to 6.5 Update 1d (U1d). A local privilege-escalation via the 'showlog' plugin could allow a low-privileged user to gain root privileges on the appliance base OS. Public details in VMware’s VMSA-2017-0021 describe this issue an...
kidshealth.org XSS vulnerability
Vulnerable URL: http://kidshealth.org/en/parents/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4943 VIP website status:| Yes Check kidshealth.org SSL connection:| Grade: B+...
CVE-2015-4943
CVE-2015-4943 affects IBM WebSphere MQ Light 1.x before 1.0.2. A remote attacker can crash the MQXR service by issuing a sequence of connect/disconnect actions; IBM’s bulletin for MQ Light notes the vulnerability and lists affected versions (1.0 and 1.0.1) with a base CVSS of 5. Remediation is to...
Oracle: Security Advisory (ELSA-2014-3047)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...