Design/Logic Flaw

The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...

CVE-2013-7483

creationtimestamp| type| source ---|---|--- 2019-08-23 00:32:52+00:00| seen| https://t.me/cibsecurity/6327 2019-08-29 16:33:49+00:00| seen| https://t.me/cibsecurity/6444...

EulerOS 2.0 SP5 : qemu-kvm (EulerOS-SA-2019-1811)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the ssd0323load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of...

CVE-2013-7483

CVE-2013-7483 affects the WordPress slidedeck2 plugin up to version 2.3.5, which contains a file inclusion vulnerability in the plugin’s code. The issue is confirmed across multiple sources; CVSS scores indicate NETWORK access with low complexity and no authentication, leading to high impact on c...

CVE-2013-7482

creationtimestamp| type| source ---|---|--- 2019-08-22 18:33:30+00:00| seen| https://t.me/cibsecurity/6303...

CVE-2013-7477

creationtimestamp| type| source ---|---|--- 2019-08-22 16:43:10+00:00| seen| https://t.me/cibsecurity/6294...

CVE-2013-7479

creationtimestamp| type| source ---|---|--- 2019-08-22 16:43:09+00:00| seen| https://t.me/cibsecurity/6292...

CVE-2013-7478

creationtimestamp| type| source ---|---|--- 2019-08-22 16:43:09+00:00| seen| https://t.me/cibsecurity/6293...

CVE-2013-7480

creationtimestamp| type| source ---|---|--- 2019-08-22 16:28:35+00:00| seen| https://t.me/cibsecurity/6290...

CVE-2013-7481

creationtimestamp| type| source ---|---|--- 2019-08-22 16:28:34+00:00| seen| https://t.me/cibsecurity/6289...

CVE-2013-7482

The CVE-2013-7482 entry concerns the Reflex Gallery WordPress plugin, with the affected component being the reflex-gallery plugin for WordPress. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability present in versions prior to 1.4.3. The Red Hat entry and CNVD/CVE records...

CVE-2013-7481

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

CVE-2013-7481

CVE-2013-7481 is a cross-site scripting (XSS) vulnerability in the WordPress plugin contact-form-plugin, affecting versions before 3.3.5. The issue resides in the plugin’s contact_form.php, enabling an attacker to inject script. Remediation: upgrade to version 3.3.5 or later. Other connected sour...

CVE-2013-7480

CVE-2013-7480 concerns the WordPress Events Manager plugin prior to version 5.3.6.1, where an XSS flaw exists via the booking form and admin areas. The Red Hat, CNVD, CVE records and WPVulnDB entries consistently describe the issue as a cross-site scripting vulnerability that can affect the plugi...

CVE-2013-7479

The events-manager plugin for WordPress (pre-5.3.9) contains an XSS flaw in the search form field. Affected versions are prior to 5.3.9; exploitation could enable client-side code execution via the search input. Root cause: unescaped input in the search field leading to script injection. Mitigati...

CVE-2013-7478

The CVE-2013-7478 entry concerns the WordPress events-manager plugin (versions prior to 5.5). It describes a stored/reflected XSS vulnerability in the EM_Ticket::get_post function, enabling client-side script execution. Affected product/component: events-manager WordPress plugin; root cause: XSS ...

CVE-2013-7477

The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...

CVE-2013-7476

creationtimestamp| type| source ---|---|--- 2019-08-14 20:38:34+00:00| seen| https://t.me/cibsecurity/6146 2019-08-20 18:33:48+00:00| seen| https://t.me/cibsecurity/6233...

CVE-2013-7476

The connected advisories confirm a CSRF vulnerability in the WordPress Simple Fields plugin prior to version 1.2, affecting the admin interface. Root cause: CSRF in admin actions could allow unauthorized requests when an authenticated admin visits a malicious page. Impact is described in CVE reco...

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4464599)

This host is missing an important security update according to Microsoft KB4464599 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...