PT-2012-3687

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 13.0 Mozilla Firefox ESR versions 10.x before 10.0.6 Thunderbird versions 5.0 through 13.0 Thunderbird ESR versions 10.x before 10.0.6 SeaMonkey versions prior to 2.11 Description The issue allows remote...

CVE-2012-2722

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

Design/Logic Flaw

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

CVE-2012-2722

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

CVE-2012-2722

The CVE-2012-2722 issue affects the Drupal Node Embed module (CKEditor-based node picker). The vulnerability is a permissions-check bypass in the node selection interface, allowing remote readers to view node titles without proper access. Affected versions are Node Embed 6.x-1.x before 6.x-1.5 an...

CVE-2012-2722: Undefined Security Weakness

The node selection interface in the WYSIWYG editor CKEditor in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles...

PT-2012-4212

Name of the Vulnerable Software and Affected Versions Node Embed module versions 6.x-1.x before 6.x-1.5 Node Embed module versions 7.x-1.x before 7.x-1.0 Description The issue is related to the node selection interface in the WYSIWYG editor CKEditor of the Node Embed module for Drupal. It does no...

SA-CONTRIB-2012-093 - Node Embed - Access Bypass

Node Embed gives content editors an interface for selecting and embedding nodes using a WYSIWYG editor. The interface for selecting nodes is a page that had no access check, allowing users to view node titles they might not have access to. This issue only affects your site if you have unpublished...

Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Windows)

Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Linux)

Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Design/Logic Flaw

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1786

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1786

The CVE-2012-1786 entry concerns the WordPress plugin Video Embed & Thumbnail Generator (pre-2.0). Affected component: Media Upload form. Root cause: path disclosure allowing remote attackers to obtain the installation path via unknown vectors. Impact: information disclosure; exploitation details...

CVE-2012-1785

kgcallffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-1786

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1785: Improper Input Validation

kgcallffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2012-3536

Name of the Vulnerable Software and Affected Versions Video Embed & Thumbnail Generator plugin versions prior to 2.0 Description The issue allows remote attackers to execute arbitrary commands. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue...

PT-2012-3537

Name of the Vulnerable Software and Affected Versions Video Embed & Thumbnail Generator plugin versions prior to 2.0 Description The issue concerns the Media Upload form in the Video Embed & Thumbnail Generator plugin, which allows remote attackers to obtain the installation path. Recommendations...

WordPress Video Embed & Thumbnail Generator Plugin <= 1.9 - Path Disclosure

Because of this vulnerability, the attackers can obtain the installation path via unknown vectors. Solution Update the plugin...

CVE-2012-1786: Exposure of Sensitive Information to an Unauthorized Actor

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...