429 matches found
WordPress JupiterX Core premium plugin <= 2.0.6 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification
Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification discovered by Ramuel Gall Wordfence in WordPress JupiterX Core premium plugin versions = 2.0.6. Solution Update the WordPress JupiterX Core premium plugin to the latest available version a...
WordPress JupiterX Core premium plugin <= 2.0.6 - Information Disclosure, Modification, and Denial of Service (DoS) vulnerabilities
Information Disclosure, Modification, and Denial of Service DoS vulnerabilities were discovered by Ramuel Gall Wordfence in the WordPress JupiterX Core premium plugin versions = 2.0.6. Solution Update the WordPress JupiterX Core premium plugin to the latest available version at least 2.0.7...
CVE-2022-26605
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...
CVE-2022-26605
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...
WordPress StatCounter plugin <= 2.0.6 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Ceylan Bozogullarindan in WordPress StatCounter plugin versions = 2.0.6. Solution Update the WordPress StatCounter plugin to the latest available version at least 2.0.7...
PT-2021-14721 · Jenkins · Jenkins Swamp Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins SAML Plugin versions 1.1.3 through 2.0.7 Description: The issue allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. This is due to an overly permissive implementation of an extension poin...
flatCore remote code execution vulnerability
flatCore is a PHP and SQLite based Web Content Management System CMS. flatCore version 2.0.7 is vulnerable to remote code execution. An attacker can exploit the vulnerability to execute arbitrary php code by uploading the addon plugin...
CVE-2021-39609
Cross Site Scripting XSS vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function...
CVE-2021-39609
Cross Site Scripting XSS vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function...
CVE-2021-39609
CVE-2021-39609 concerns FlatCore-CMS 2.0.7, where a Cross-Site Scripting (XSS) vulnerability exists via the Upload Image feature. Multiple sources (NVD, CNVD/CNNVD, CVE listings) corroborate that this is an XSS in flatCore’s CMS handling of image uploads. The connected documents do not provide co...
CVE-2021-39609
Cross Site Scripting XSS vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function...
Mutt 1.11.0 < 2.0.7 DoS Vulnerability
Mutt is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mutt:mutt"; ifdescription...
CVE-2021-32055
Mutt 1.11.0 through 2.0.x before 2.0.7 and NeoMutt 2019-10-25 through 2021-05-04 has a $imapqresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imapqresync setting for QRESYNC is not enabled by default...
Mutt 缓冲区错误漏洞
Mutt is a text-based mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt versions 1.11.0 through 2.0.x and prior to 2.0.7 in the 2.0.x series, which is caused by an out-of-scope read...
Edwiser Bridge < 2.0.7 - CSRF Nonce Bypass
The plugin did not properly verify for CSRF nonces, allowing requests without them to bypass the checks in place. This could allow attackers to make logged in users perform unwanted actions...
AntSword cross-site scripting vulnerability (CNVD-2020-59741)
AntSword is an open source, cross-platform web management tool designed to meet the needs of penetration testers as well as security researchers with permissions and/or authorizations, and webmasters. A cross-site scripting vulnerability exists in AntSword 2.0.7. An attacker can exploit this...
WordPress Pixova Lite theme <=2.0.6 - Unauthenticated Function Injection vulnerability
Unauthenticated Function Injection vulnerability found by Jerome Bruandet NinTechNet in WordPress Pixova Lite theme versions =2.0.6. Solution Update the WordPress Pixova Lite theme to the latest available version at least 2.0.7...
DEBIAN-CVE-2020-24916
CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection...