3705 matches found
ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2019-17563 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.96)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2019-17563 Source advisory: OSV:GHSA-9XCJ-C8CR-8C3C...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4529 more potentially affected by CVE-2019-17563 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.49)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2019-17563 Source advisory: OSV:GHSA-9XCJ-C8CR-8C3C...
ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2019-17563 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.96)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2019-17563 Source advisory: GHSA-9XCJ-C8CR-8C3C...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +3108 more potentially affected by CVE-2019-17563 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.29)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2019-17563 Source...
ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2019-12418 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.96)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2019-12418 Source advisory: MEND:CVE-2019-12418...
Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code
The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Vulnerability in Shortcode Embed Code security vulnerability...
Advantech WISE-PaaS/RMM WechatSignin wechattokenlogin XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WISE-PasS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WechatSignin class. Due to the improper restriction of XML External...
Linux pcpu_embed_first_chunk Heap Buffer Overflow Info Disclosure
The vulnerability of the pcpuembedfirstchunk function in the Linux operating system’s kernel relates to the ability to read data from the dmesg output of the printk"pages / cpu" command. Exploiting this vulnerability can allow an intruder to gain unauthorized access to sensitive information...
CVE-2019-16665: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrated by a crafted SVG document in the SRC attribute of an EMBED element...
PT-2019-14751
Name of the Vulnerable Software and Affected Versions ThinkSAAS version 2.91 Description An issue was discovered where there is a potential for XSS via the content to the "index.php?app=group&ac=comment&ts=do&js=1" URI. This can be demonstrated by a crafted SVG document in the SRC attribute of an...
CVE-2019-15648: Improper Limitation of a Pathname to a Restricted Directory
The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber...
CVE-2019-15649: Unrestricted Upload of File with Dangerous Type
The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload...
PT-2019-14320
Name of the Vulnerable Software and Affected Versions insert-or-embed-articulate-content-into-wordpress plugin versions prior to 4.29991 Description The issue is related to insufficient restrictions on deleting or renaming content by a Subscriber. Recommendations For versions prior to 4.29991,...
PT-2019-14321
Name of the Vulnerable Software and Affected Versions insert-or-embed-articulate-content-into-wordpress plugin versions prior to 4.2999 Description The issue is related to insufficient restrictions on file upload, which could potentially allow unauthorized access or malicious activity...
WordPress embed-comment-images plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. embed-comment-images is a plugin that supports embedding image links in comments. A cross-site scripting vulnerability exists in the...
CVE-2017-18561
The embed-comment-images plugin before 0.6 for WordPress has XSS...
CVE-2017-18561
The embed-comment-images plugin before 0.6 for WordPress has XSS...
CVE-2017-18561
The CVE-2017-18561 entry concerns the WordPress plugin embed-comment-images with an XSS vulnerability in versions before 0.6. Connected sources consistently describe Cross-Site Scripting in this plugin, evidenced by references noting XSS and a PoC demonstrating an image tag-based vector (e.g., un...
PT-2019-8495
Name of the Vulnerable Software and Affected Versions WordPress embed-comment-images plugin versions prior to 0.6 Description The issue allows for cross-site scripting XSS attacks. Recommendations For versions prior to 0.6, update the embed-comment-images plugin to version 0.6 or later to resolve...