CVE-2016-11003

The Bloom plugin for WordPress (Elegant Themes) is affected prior to version 1.1.1, with a privilege escalation vulnerability disclosed across multiple sources (NVD/Red Hat/WPVulnDB/PT Security). Impact described as privilege escalation for registered users, with remediation to upgrade to version...

CVE-2019-11003

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...

CVE-2019-11003

Materialize up to version 1.0.0 is susceptible to Cross-Site Scripting via the Autocomplete feature. The root cause is insufficient sanitization of user input in the Autocomplete component, enabling arbitrary JavaScript execution when rendered. Affected: Materialize (frontend framework) using the...

CVE-2017-11003

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size...

CVE-2017-11003

CVE-2017-11003 affects Android for MSM, Firefox OS for MSM, and QRD Android builds via CAF Linux kernel. The issue arises during firmware image update where data is read from flash into RAM without confirming it fits allotted RAM, enabling potential memory mismanagement. Documented impact include...

studenti.it XSS vulnerability

Vulnerable URL: http://www.studenti.it/search/%22%3E%3Cimg%20src=x%20onerror=alert%28'OPENBUGBOUNTY'%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11003 VIP website status:|...

IGSS ODBC Server Multiple Uninitialized Pointer Denial of Service Vulnerability

The host is running IGSS ODBC Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodigssodbcserverdosvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IGSS ODBC Server Multiple Uninitialized Pointer Denial of Service Vulnerability Authors: Veerendra G.G Copyrigh...