37 matches found
MINI-6933-M3W7-VR56
Bulletin has no description...
CVE-2023-6933
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...
Ubuntu: Security Advisory (USN-6933-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : ClickHouse vulnerabilities (USN-6933-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6933-1 advisory. It was discovered that ClickHouse incorrectly handled memory, leading to a heap out-of-bounds data read. An attacker could possibly use this issue to cau...
LimeSurvey < 6.6.2-240827 SQLi Vulnerability
LimeSurvey is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:limesurvey:limesurvey...
CVE-2024-6933
creationtimestamp| type| source ---|---|--- 2024-07-21 04:10:11+00:00| seen| https://t.me/cvedetector/1291...
CVE-2024-6933
A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.php?r=admin/database/index/updatesurveylocalesettingsgeneralsettings of the component Survey General Settings Handler. This manipulation of...
CVE-2024-6933 LimeSurvey Survey General Settings updatesurveylocalesettings_generalsettings actionUpdateSurveyLocaleSettingsGeneralSettings sql injection
A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.php?r=admin/database/index/updatesurveylocalesettingsgeneralsettings of the component Survey General Settings Handler. This manipulation of...
CVE-2023-6933
CVE-2023-6933 affects the WordPress plugin Better Search Replace (
CVE-2023-6933 Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...
CVE-2023-6933
creationtimestamp| type| source ---|---|--- 2024-01-26 11:34:31+00:00| exploited| https://t.me/xakepru/15297 2024-02-15 02:16:19+00:00| seen| https://t.me/ctinow/185182 2024-02-18 09:11:50+00:00| seen| https://t.me/ctinow/187179 2025-09-24 15:12:43+00:00| confirmed|...
WordPress Better Search Replace Plugin <= 1.4.4 is vulnerable to PHP Object Injection
Software Better Search Replace Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-6933 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 3ac241f51ac9 Credits Sam Pizzey mopman Required privilege...
VulnCheck KEV: CVE-2023-6933
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin...
Oracle Linux 8 : libreoffice (ELSA-2023-6933)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6933 advisory. - Resolves: rhbz2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz2210195 CVE-2023-2255 libreoffice: Remote documents...
RHEL 8 : libreoffice (RHSA-2023:6933)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6933 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...
CentOS 8 : libreoffice (CESA-2023:6933)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:6933 advisory. - Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code fro...
CVE-2020-6933
An improper input validation vulnerability in the UEM Core of BlackBerry UEM versions 12.13.0, 12.12.1a QF2 and earlier, and 12.11.1 QF3 and earlier could allow an attacker to potentially cause a Denial of Service DoS of the UEM Core service...
CVE-2020-6933
CVE-2020-6933 describes an improper input validation in BlackBerry UEM Core that could cause a Denial of Service. Affected versions include BlackBerry UEM 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier). The issue’s impact is a DoS of the UEM Core service; exploitation details ...
APSB16-40 Security updates available for Adobe Experience Manager Forms (LiveCycle)
Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve two important input validation issues that could be used in cross-site scripting attacks CVE-2016-6933 and CVE-2016-6934. Adobe recommends users apply the available...
ESXi 6.0 < Build 3380124 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)
The remote VMware ESXi 6.0 host is prior to build 3380124. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memory, resulting in an elevation ...