45 matches found
CVE-2023-5566 Simple Shortcodes <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
WordPress Simple Shortcodes Plugin <= 1.0.20 is vulnerable to Cross Site Scripting (XSS)
Software Simple Shortcodes Type Plugin Vulnerable versions = 1.0.20 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5566 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f3951a8b757d Credits István Márton Required...
RHEL 7 : openssl (RHSA-2020:5566)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5566 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
Extreme Networks Aerohive HiveOS 11.x Denial Of Service
!/bin/bash Extreme Networks Aerohive HiveOS no system web-server hive-ui enable Tested on: Hiawatha v9.6 Vulnerability discvered by Gjoko 'LiquidWorm' Krstic @zeroscience Advisory ID: ZSL-2020-5566 Advisory URL...
CVE-2020-5566
Cybozu Garoon 4.0.0–4.10.3 contains an improper authorization vulnerability (CWE-285) that allows remote authenticated attackers to alter data via the E-mail and Messages applications. Affected component: Cybozu Garoon core with access to E-mail and Messages; root cause is improper authorization ...
JVN#35649781: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Authentication bypass in the API used to specify the fields CWE-287 - CVE-2020-5563 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2|...
CVE-2019-5566
CVE-2019-5566 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-5566
Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...
CVE-2017-5566
CVE-2017-5566 affects AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier. The issue is a local code-injection vulnerability (DoubleAgent) that bypasses AVG’s self-protection by abusing Windows Application Verifier DLL loading via an Imag...
CVE-2015-5566
CVE-2015-5566 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR (before 18.0.0.199; AIR SDK before 18.0.0.199; AIR SDK & Compiler before 18.0.0.199) that allows attackers to execute arbitrary code via unspecified...
Google Chrome < 44.0.2403.155 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562...
Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-556...
Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)
According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
CVE-2014-5566
CVE-2014-5566 affects the Android app “The Selfshot - Front Flash Camera” (com.americos.selfshot) version 1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...
openSUSE Security Update : horde4-kronolith (openSUSE-SU-2012:1625-1)
This version update to version 3.0.18 addresses bnc791184: Two sets 3.0.17 and 3.0.18 of XSS flaws CVE-2012-5566 and CVE-2012-5567 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2012-5566
Multiple cross-site scripting XSS vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used in Horde Groupware Webmail Edition before 4.0.8, allow remote attackers to inject arbitrary web script or HTML via the 1 tasks view or 2 search view...
CVE-2012-5566
Affected software: Horde Kronolith (H4) 3.0.x used in Horde Groupware Webmail Edition prior to 4.0.8. Vulnerability: multiple XSS flaws in the tasks view and search view, due to input handling in Kronolith before 3.0.17. Impact: remote attackers can inject arbitrary web script or HTML. Remediatio...
CVE-2013-5566
Cisco NX-OS 5.0 and earlier on Cisco MDS 9000 devices is affected by CVE-2013-5566, where improper handling of VRRP frames with Authentication Header (AH) can cause a denial-of-service due to supervisor CPU consumption. The issue is triggered by specially crafted VRRP AH frames, leading to high C...