33558 matches found
CVE-2014-10390
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:33+00:00| seen| https://t.me/cibsecurity/6317 2019-08-29 16:33:44+00:00| seen| https://t.me/cibsecurity/6439...
CVE-2014-10391
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:32+00:00| seen| https://t.me/cibsecurity/6316 2019-08-29 16:33:43+00:00| seen| https://t.me/cibsecurity/6438...
CVE-2014-10392
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:31+00:00| seen| https://t.me/cibsecurity/6315...
CVE-2014-10394
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:30+00:00| seen| https://t.me/cibsecurity/6314 2019-08-29 16:33:42+00:00| seen| https://t.me/cibsecurity/6437...
CVE-2014-10386
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...
CVE-2014-10393
The CVE-2014-10393 entry describes a cross-site scripting (XSS) vulnerability in the WordPress cforms2 plugin before version 10.5. Affected component: cforms2 WordPress plugin; vulnerability type: XSS. Consequence: allows potentially unintended client-side code execution as documented in multiple...
CVE-2014-10382
The CVE-2014-10382 vulnerability affects the WordPress feature-comments plugin prior to version 1.2.5. It is a cross‑site request forgery (CSRF) flaw that allows an attacker to perform actions like featuring or burying comments by authenticated/unauthenticated users depending on the context descr...
CVE-2014-10388
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
CVE-2014-10391
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10389
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...
CVE-2014-10386
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...
CVE-2014-10386
The vulnerability CVE-2014-10386 affects the WordPress wp-live-chat-support plugin prior to version 4.1.0 and involves JavaScript injections. Affected software: wp-live-chat-support plugin for WordPress. Root cause: improper handling of input allowing injection of JavaScript into the plugin’s con...
CVE-2014-10387
The CVE-2014-10387 incident concerns the WordPress plugin WP Support Plus Responsive Ticket System (affected: before version 4.2). The vulnerability is an SQL injection in the plugin, exposing potential disclosure/modification of data and impact to availability, as indicated by CVSS metrics (UP t...
CVE-2014-10388
CVE-2014-10388 affects the WordPress plugin wp-support-plus-responsive-ticket-system prior to version 4.2. Multiple connected sources (RH, NVD, CVE lists, WPVulnDB) consistently describe a full path disclosure vulnerability in this plugin, enabling disclosure of server file paths. Public details ...
CVE-2014-10389
The CVE-2014-10389 entry concerns the WordPress plugin wp-support-plus-responsive-ticket-system (pre-4.2). The connected sources confirm an authorization/authentication issue in this plugin, described as "incorrect authentication". Affected version is stated as prior to 4.2; CVSS metrics from NVD...
CVE-2014-10390
The CVE-2014-10390 entry concerns the WordPress plugin wp-support-plus-responsive-ticket-system (pre-4.2). The vulnerability is a directory traversal flaw in the plugin, exposing potential unauthorized access to filesystem paths. Public sources confirm the affected component as the plugin’s code ...
CVE-2014-10391
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...
CVE-2014-10391
The CVE-2014-10391 entry concerns the WordPress plugin WP Support Plus Responsive Ticket System, specifically versions prior to 4.1. The vulnerability is a JavaScript injection (XSS) flaw caused by insufficient validation of client-side data in the plugin. Impact is that an attacker could trigger...
CVE-2014-10392
The CVE-2014-10392 entry concerns the WordPress cforms2 plugin, specifically versions before 10.2, which are affected by a cross-site scripting (XSS) vulnerability. The vulnerability is due to an XSS flaw in the plugin’s handling of input, allowing an attacker to inject and execute client-side sc...