Lucene search
K

39 matches found

CNNVD
CNNVD
added 2026/05/22 12:0 a.m.7 views

WordPress plugin WP Blockade 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.8AI score0.00011EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/05/21 4:12 p.m.3 views

WordPress WP Blockade – Visual Page Builder plugin <= 0.9.14 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin WP Blockade versions = 0.9.14...

6.1CVSS5.8AI score0.00011EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2026/04/08 7:53 a.m.2 views

WordPress WP Blockade plugin <= 0.9.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'shortcode' Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Shortcode Execution via 'shortcode' Parameter vulnerability discovered by theviper17y in WordPress Plugin WP Blockade versions = 0.9.14...

6.5CVSS5.9AI score0.00015EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2026/04/08 6:43 a.m.8 views

CVE-2026-3480

The CVE-2026-3480 entry concerns the WordPress plugin WP Blockade (versions up to and including 0.9.14). The vulnerability is a Missing Authorization flaw in the admin_post handler for the shortcode render path. The function render_shortcode_preview() does not perform any capability checks (no cu...

6.5CVSS6AI score0.00015EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/04/08 6:43 a.m.19 views

CVE-2026-3480 WP Blockade <= 0.9.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'shortcode' Parameter

The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14. The plugin registers an adminpost action hook 'wp-blockade-shortcode-render' that maps to the rendershortcodepreview function. This function lacks any capability check...

6.5CVSS0.00015EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-2159

Name of the Vulnerable Software and Affected Versions OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14 Description The software contains a heap buffer underflow in the readline function of mdb load. Processing malformed input with an embedded NUL byte can cause a...

4.6CVSS6.6AI score0.0002EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-9656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as...

8.8CVSS7.7AI score0.00698EPSS
Exploits1References2
Packet Storm News
Packet Storm News
added 2025/05/23 12:0 a.m.2 views

Gentoo Linux Security Advisory 201908-26

Gentoo Linux Security Advisory 201908-26 - Multiple vulnerabilities have been found in libofx, the worst of which could result in the arbitrary execution of code. Versions less than 0.9.14 are affected...

8.8CVSS7.4AI score0.00747EPSS
Exploits4
SUSE CVE
SUSE CVE
added 2023/02/15 6:17 a.m.1 views

SUSE CVE-2005-3340

The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...

7.2CVSS6.9AI score0.0006EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.2 views

SUSE CVE-2007-6118

The MEGACO dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

7.8CVSS6.8AI score0.0488EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:9 a.m.1 views

SUSE CVE-2007-6451

Unspecified vulnerability in the CIP dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors that trigger allocation of large amounts of memory...

4.3CVSS6.8AI score0.03032EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.1 views

SUSE CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

5.3CVSS7AI score0.00698EPSS
Exploits1References4
vulnersOsv
vulnersOsv
added 2022/05/13 1:49 a.m.2 views

org.apache.guacamole:guacamole-ext (>=0.9.10-incubating <=0.9.14) potentially affected by CVE-2018-1340 via org.apache.guacamole:guacamole-common (>=0.9.10-incubating <=0.9.14)

org.apache.guacamole:guacamole-common MAVEN version =0.9.10-incubating, =0.9.10-incubating, =0.9.14 Source cves: CVE-2018-1340 Source advisory: OSV:GHSA-WR7R-VG3C-54R5...

7.5CVSS7AI score0.00633EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/03/12 1:15 a.m.3 views

CVE-2022-26276

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...

5.3CVSS5.9AI score0.00147EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/12 12:0 a.m.2 views

OneNav 路径遍历漏洞

OneNav is a minimalist navigation/bookmark management system developed using PHP. A security vulnerability exists in index.php in OneNav v0.9.14. The vulnerability allows attackers to perform directory traversal...

5.3CVSS5.8AI score0.00147EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2019/03/11 5:29 a.m.17 views

CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS7.2AI score0.00698EPSS
Exploits1References4
OSV
OSV
added 2019/03/11 5:29 a.m.9 views

CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS6.6AI score
Exploits0References4
OSV
OSV
added 2019/03/11 5:29 a.m.1 views

UBUNTU-CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS7.2AI score0.00698EPSS
Exploits1References5
CNVD
CNVD
added 2019/03/11 12:0 a.m.2 views

LibOFX Null Pointer Backreference Vulnerability

LibOFX is a library that allows programs to support OFX financial data bi-directional exchange command responses. A null pointer back-reference vulnerability exists in the 'OFXApplication::startElement' function in the lib/ofxsgml.cpp file in LibOFX version 0.9.14. No detailed vulnerability detai...

8.8CVSS7AI score0.00698EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2019/03/11 12:0 a.m.2 views

PT-2019-19780 · Libofx +3 · Libofx +3

Name of the Vulnerable Software and Affected Versions: LibOFX version 0.9.14 Description: An issue was discovered in LibOFX. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx sgml.cpp, as demonstrated by ofxdump. Recommendations: For LibOFX versi...

8.8CVSS6.7AI score0.00698EPSS
Exploits1References33
Rows per page
Query Builder