3175 matches found
WordPress Plugin FooGallery 1.8.12 - Persistent Cross-Site Scripting
Exploit Title: Wordpress FooGallery 1.8.12 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\foogallery" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://foo.gallery/ Software Link: https://wordpress.org/plugins/foogallery/ Version: 1.8.12 Tested on: Kali...
PT-2019-6300
Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.22.1 Description The issue is related to a lack of protection for the web page structure in the Portainer platform, specifically in the isteven-multi-select component. This allows a remote attacker to conduct...
NetApp ONTAP Select Deploy Remote Command Execution Vulnerability
ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. A remote command execution vulnerability exists in ONTAP Select Deploy 2.12, 2.12.1. An attacker could exploit this vulnerability to perform administrative operations...
NetApp ONTAP Select Deploy Information Disclosure Vulnerability (CNVD-2019-43849)
ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. An information disclosure vulnerability exists in ONTAP Select Deploy. The vulnerability stems from the product transmitting credentials in plain text. An attacker could exploit this vulnerability to...
CVE-2019-5505
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
CVE-2019-5504
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...
CVE-2019-5504
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...
CVE-2019-5505
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
Open redirect
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
CVE-2019-5505
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
CVE-2019-5505
The CVE-2019-5505 issue affects NetApp ONTAP Select Deploy admin utility versions 2.2–2.12.1, where credentials are transmitted in plaintext. The combined documents identify the root cause as unencrypted credential handling in the deploy utility, leading to potential credential disclosure. The vu...
CVE-2019-5504
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...
CVE-2019-5504
The CVE-2019-5504 entry concerns ONTAP Select Deploy administration utility versions 2.12 and 2.12.1. The vulnerability arises because an HTTP service is bound to the network, allowing unauthenticated remote attackers to perform administrative actions. Documents confirm the affected product (ONTA...
PT-2019-17720
Name of the Vulnerable Software and Affected Versions ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 Description The issue concerns the transmission of credentials in plaintext by the affected software. Recommendations For versions 2.2 through 2.12.1, update to a version...
PT-2019-17719
Name of the Vulnerable Software and Affected Versions ONTAP Select Deploy administration utility versions 2.12 through 2.12.1 Description The issue allows unauthenticated remote attackers to perform administrative actions due to an HTTP service bound to the network. Recommendations For versions...
CVE-2019-5504: Missing Authentication for Critical Function
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...
CVE-2019-5505: Cleartext Transmission of Sensitive Information
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
PT-2019-5545
Name of the Vulnerable Software and Affected Versions SQLite versions 3.30.1 and earlier Description The issue is related to errors in handling numbers, which can be exploited by a remote attacker to cause a denial of service. It is also reported that certain SELECT statements with a nonexistent...
Humanica Humatrix 7 Recruitment Module Information Disclosure Vulnerability
Humanica Humatrix 7 is a human resource management solution. recruitment is one of the recruitment modules. A security vulnerability exists in the Recruitment module in Humanica Humatrix 7 versions 1.0.0.681 and 1.0.0.203. A remote attacker can exploit the vulnerability by modifying the 'selApp'...