33558 matches found
CVE-2014-4548
CVE-2014-4548 : The Ruven Toolkit WordPress plugin (
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
CVE-2014-4544
Podcast Channels WordPress plugin ≤0.20 is affected by an unauthenticated reflected XSS via the Filename parameter to getid3/demos/demo.write.php. The vulnerability allows execution of arbitrary script in the victim’s browser, with potential session-related impacts. Affected versions are 0.20 and...
CVE-2014-4539
Cross-site scripting XSS vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...
CVE-2014-4539
CVE-2014-4539 : A cross-site scripting (XSS) flaw in the WordPress Movies plugin (versions 0.6 and earlier) exists due to insufficient validation in the filename parameter of getid3/demos/demo.mimeonly.php. This allows remote attackers to inject arbitrary script/HTML, potentially executing code i...
CVE-2014-4567
Cross-site scripting XSS vulnerability in comments/videowhisper2/rlogout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2014-4567
CVE-2014-4567 : XSS in the WordPress Video Comments Webcam Recorder plugin (version ~1.55, affected when downloaded before 20140116) located in comments/videowhisper2/r_logout.php . Root cause: insufficient validation of client-side data in the web app, allowing injection of arbitrary script/HTML...
CVE-2014-4592
Cross-site scripting XSS vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2014-4592
The CVE-2014-4592 entry refers to a cross-site scripting (XSS) vulnerability in the WP-Planet WordPress plugin (<= 0.1) specifically in rss.class/scripts/magpie_debug.php, exploitable via the url parameter. The Root Cause is improper input handling that allows attackers to inject and execute c...
CVE-2014-4523
creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:13+00:00| seen| https://t.me/cibsecurity/8878 2024-03-17 14:51:45+00:00| seen| https://t.me/ctinow/209940...
CVE-2014-4525
creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:13+00:00| seen| https://t.me/cibsecurity/8877...
CVE-2014-4559
creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:12+00:00| seen| https://t.me/cibsecurity/8876 2024-03-17 14:51:46+00:00| seen| https://t.me/ctinow/209941...
CVE-2014-4519
Cross-site scripting XSS vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter...
CVE-2014-4519
CVE-2014-4519 : A cross-site scripting (XSS) vulnerability affects the WordPress Conversador plugin ≤ 2.61. The issue arises from the page parameter, allowing remote attackers to inject arbitrary scripts/HTML. Connected sources confirm affected software and vulnerable parameter, but no explicit r...
CVE-2014-4523
Cross-site scripting XSS vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2014-4559
CVE-2014-4559 is an XSS vulnerability in the Swipe Checkout for WP e-Commerce plugin (WordPress) affecting test-plugin.php, version 3.1.0 and earlier. The issue allows remote injection of arbitrary script/HTML via the parameters api_key, payment_page_url, merchant_id, api_url, or currency. Connec...
CVE-2014-4525
The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...
CVE-2014-4523
CVE-2014-4523 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Easy Career Openings (versions ≤ 0.4). Multiple sources describe it as arising from insufficient validation of client-side data, allowing remote attackers to inject arbitrary scripts via unspecified parameters. Th...
EulerOS 2.0 SP5 : mod_wsgi (EulerOS-SA-2019-2711)
According to the version of the modwsgi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - modwsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which migh...
[SECURITY] [DLA 2045-1] tightvnc security update
Package : tightvnc Version : 1.3.9-6.5+deb8u1 CVE ID : CVE-2014-6053 CVE-2018-7225 CVE-2019-8287 CVE-2018-20021 CVE-2018-20022 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 CVE-2019-15681 Debian Bug : 945364 Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC...