PT-2019-7488 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7467 · WordPress · Easy Digital Downloads (Edd) Commissions Extension

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD Commissions extension for WordPress versions 1.8.x through 1.8.6 Easy Digital Downloads EDD Commissions extension for WordPress versions 1.9.x through 1.9.9 Easy Digital Downloads EDD Commissions extension for...

PT-2019-7465 · WordPress · Easy Digital Downloads (Edd) Amazon S3 Extension

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD Amazon S3 extension for WordPress versions 1.8.x through 1.8.6 Easy Digital Downloads EDD Amazon S3 extension for WordPress versions 1.9.x through 1.9.9 Easy Digital Downloads EDD Amazon S3 extension for WordPress...

PT-2019-7464 · Sandhills Development · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD core component versions 1.8.x through 1.8.6 Easy Digital Downloads EDD core component versions 1.9.x through 1.9.9 Easy Digital Downloads EDD core component versions 2.0.x through 2.0.4 Easy Digital Downloads EDD co...

PT-2019-7486 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7491 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7484 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

Nix package manager elevation of privilege vulnerability

Nix package manager is a package manager for Unix-like systems. An elevation of privilege vulnerability exists in Nix package manager version 2.3 and earlier, which can be exploited by a local attacker to gain access to arbitrary user accounts...

Code injection

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...

CVE-2019-17365

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...

CVE-2019-17365

Summary: CVE-2019-17365 affects Nix up to version 2.3, where local users can gain access to arbitrary user accounts due to the parent directory of user-profile directories being world-writable. This local elevation of privilege is supported by multiple related entries (e.g., Red Hat and NVD recor...

PT-2019-15106 · Nix · Nix

Name of the Vulnerable Software and Affected Versions: Nix versions prior to 2.3 Description: The issue allows local users to gain access to an arbitrary user's account. This is because the parent directory of the user-profile directories is world writable. Recommendations: For versions prior to...

Open-School 3.0 / Community Edition 2.3 Cross Site Scripting

Exploit Title: title Date: 2019 08 06 Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE : CVE-2019-14696 Open-School 3.0, and Community Edition 2.3, allows XSS via the...

CVE-2019-13143

An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the...

CVE-2019-14696

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter...

Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-25993)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento encryption issue vulnerability (CNVD-2019-40840)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . An encryption issue vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and...

Magento Information Disclosure Vulnerability (CNVD-2019-26252)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, an...

Magento Information Disclosure Vulnerability (CNVD-2019-26225)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, an...

Magento Cross-Site Scripting Vulnerability (CNVD-2019-25990)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2...