33560 matches found
FISMA Annual Report to Congress
The Office of Management and Budget OMB has published its Fiscal Year FY 2018 Annual Report to Congress on the implementation of the Federal Information Security Modernization Act of 2014 FISMA. The document includes data reported by agencies to OMB and the Cybersecurity and Infrastructure Securi...
CVE-2014-10389
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:34+00:00| seen| https://t.me/cibsecurity/6318 2019-08-29 16:33:45+00:00| seen| https://t.me/cibsecurity/6440...
CVE-2014-10390
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:33+00:00| seen| https://t.me/cibsecurity/6317 2019-08-29 16:33:44+00:00| seen| https://t.me/cibsecurity/6439...
CVE-2014-10391
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:32+00:00| seen| https://t.me/cibsecurity/6316 2019-08-29 16:33:43+00:00| seen| https://t.me/cibsecurity/6438...
CVE-2014-10392
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:31+00:00| seen| https://t.me/cibsecurity/6315...
CVE-2014-10394
creationtimestamp| type| source ---|---|--- 2019-08-22 22:38:30+00:00| seen| https://t.me/cibsecurity/6314 2019-08-29 16:33:42+00:00| seen| https://t.me/cibsecurity/6437...
CVE-2014-10386
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...
CVE-2014-10393
The CVE-2014-10393 entry describes a cross-site scripting (XSS) vulnerability in the WordPress cforms2 plugin before version 10.5. Affected component: cforms2 WordPress plugin; vulnerability type: XSS. Consequence: allows potentially unintended client-side code execution as documented in multiple...
CVE-2014-10382
The CVE-2014-10382 vulnerability affects the WordPress feature-comments plugin prior to version 1.2.5. It is a cross‑site request forgery (CSRF) flaw that allows an attacker to perform actions like featuring or burying comments by authenticated/unauthenticated users depending on the context descr...
CVE-2014-10388
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
CVE-2014-10391
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10389
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...
CVE-2014-10386
The vulnerability CVE-2014-10386 affects the WordPress wp-live-chat-support plugin prior to version 4.1.0 and involves JavaScript injections. Affected software: wp-live-chat-support plugin for WordPress. Root cause: improper handling of input allowing injection of JavaScript into the plugin’s con...
CVE-2014-10386
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...
CVE-2014-10387
The CVE-2014-10387 incident concerns the WordPress plugin WP Support Plus Responsive Ticket System (affected: before version 4.2). The vulnerability is an SQL injection in the plugin, exposing potential disclosure/modification of data and impact to availability, as indicated by CVSS metrics (UP t...
CVE-2014-10388
CVE-2014-10388 affects the WordPress plugin wp-support-plus-responsive-ticket-system prior to version 4.2. Multiple connected sources (RH, NVD, CVE lists, WPVulnDB) consistently describe a full path disclosure vulnerability in this plugin, enabling disclosure of server file paths. Public details ...
CVE-2014-10389
The CVE-2014-10389 entry concerns the WordPress plugin wp-support-plus-responsive-ticket-system (pre-4.2). The connected sources confirm an authorization/authentication issue in this plugin, described as "incorrect authentication". Affected version is stated as prior to 4.2; CVSS metrics from NVD...
CVE-2014-10390
The CVE-2014-10390 entry concerns the WordPress plugin wp-support-plus-responsive-ticket-system (pre-4.2). The vulnerability is a directory traversal flaw in the plugin, exposing potential unauthorized access to filesystem paths. Public sources confirm the affected component as the plugin’s code ...