CVE-2017-18855

NETGEAR WNR854T devices before 1.5.2 are affected by command execution...

Apache Shiro Authentication Bypass Vulnerability

Apache Shiro is the United States Apache Apache Software Foundation for the implementation of authentication , authorization , encryption and session management of the Java security framework . A security vulnerability exists in Apache Shiro versions prior to 1.5.2. An attacker could exploit the...

WordPress Pretty-Link Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. A cross-site scripting vulnerability exists in WordPress Pretty-Link versi...

Cross site scripting

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2017-18582

The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues...

Teclib GLPI Teclib News Plugin Cross-Site Scripting Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. teclib News plugin is one of the plugins used to display news messages on th...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-20986)

SquirrelMail is a set of PHP language development , cross-platform Webmail mail system . A cross-site scripting vulnerability exists in SquirrelMail versions 1.4.22 and later and version 1.5.x before 1.5.2. The vulnerability stems from a lack of proper validation of client data by the web...

WordPress wpForo Forum Plugin Privilege Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wpForo Forum plugin is a forum plugin used in it. WordPress wpForo Forum plugin version 1.5.2 before the existence of a...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

SQL Injection Vulnerability in zzzphp V1.5.2

zzphp is the use of PHP + ACCESS / MSSQL development of free website building system. A SQL injection vulnerability exists in zzzphp V1.5.2 180910, which can be exploited by an attacker to bypass authentication to log in to the administrator's page, view sensitive information or perform...

PYSEC-2018-54

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

pkgconf buffer overflow vulnerability

pkgconf is an application that configures compilers for development frameworks. A buffer overflow vulnerability exists in the 'dequote' function in pkgconf versions 1.5.0 through 1.5.2. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with the help...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

CVE-2018-1000221

Affected software: pkgconf up to version 1.5.2. Vulnerability: buffer overflow in dequote() when initial length is 0, potentially leading to overflow through a specially crafted .pc file. Impact/Severity: reported as high/critical in CVSS terms (C/H/I/H/A/H per provided metrics). Status/Fix: vuln...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

CVE-2018-1000221

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview org.jenkins-ci.plugins:fortify-cloudscan-jenkins-plugin allows an organization to host their own internal cloud-based infrastructure of Static Code Analyzer SCA machines that are distributed jobs by a centralized controller and optionally integrated with Software Security Center SSC...

MP3Gain 'apetag.c' Memory Corruption Vulnerability

MP3Gain is a volume adjustment application for MP3 files. A security vulnerability exists in the apetag.c file in MP3Gain version 1.5.2.r2. The vulnerability can be exploited to corrupt stack memory with the help of specially crafted MP3 files...

PT-2018-10049 · Z Blogphp · Z-Blogphp

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.5.2 Description: The issue allows an administrator to inject a Cross Site Scripting XSS payload via the ZC BLOG NAME parameter in the "Web site settings -- Basic setting -- Website title" section, accessible through the zb...