70 matches found
MINI-36JM-GCXH-5468
Bulletin has no description...
MINI-22MR-5468-32RH
Bulletin has no description...
CVE-2026-5468
A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the publi...
CGA-2H4V-6P55-5468
Bulletin has no description...
CVE-2019-5468
An privilege escalation issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 when Mattermost slash commands are used with a blocked account...
CGA-C84G-XCF2-5468
Bulletin has no description...
CVE-2024-5468 WordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options Deletion
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stmhbdelete function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to...
WordPress Pearl Plugin <= 1.3.7 is vulnerable to Broken Access Control
Software Pearl Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5468 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 816d74377350 Credits Lucio Sá Required privilege...
CVE-2023-5468
creationtimestamp| type| source ---|---|--- 2023-10-10 12:30:00+00:00| seen| https://t.me/cibsecurity/71897...
CVE-2023-5468 Slick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Slick Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcscf-link' shortcode in versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...
CVE-2023-5468
Slick Contact Forms (WordPress) is vulnerable to Stored XSS via the dcscf-link shortcode in versions up to 1.3.7 due to insufficient input sanitization and output escaping. Exploitation requires attacker with contributor-level or higher permissions, and the vulnerability can cause arbitrary scrip...
SUSE CVE-2006-5468
Unspecified vulnerability in the HTTP dissector in Wireshark formerly Ethereal 0.99.3 allows remote attackers to cause a denial of service crash via unspecified vectors...
Rocky Linux 8 : php:8.0 (RLSA-2022:5468)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5468 advisory. - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to...
CentOS 8 : php:8.0 (CESA-2022:5468)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5468 advisory. - php: password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 Note that Nessus has not tested for this issue but has instead relied...
Oracle Linux 8 : php:8.0 (ELSA-2022-5468)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5468 advisory. php 8.0.13-3 - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 Tenable has extracted the preceding description block...
RHEL 8 : php:8.0 (RHSA-2022:5468)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5468 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: password of excessive length triggers buff...
Ubuntu: Security Advisory (USN-5468-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Security Advisory (MFSA2017-10) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-5468
...
CVE-2020-5468
CVE-2020-5468 is rejected/not used; this CVE ID does not represent an active vulnerability entry.