35960 matches found
CVE-2015-10112
CVE-2015-10112 affects the WordPress plugin WooFramework Branding up to version 1.0.1. The vulnerability resides in the function admin_screen_logic of wooframework-branding.php, where manipulation of the url argument enables an open redirect. This can be triggered remotely. The recommended remedi...
GitLab < 15.10.8 (CVE-2023-2015)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A...
Amazon Linux 2 : libplist (ALAS-2023-2067)
The version of libplist installed on the remote host is prior to 1.12-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2067 advisory. A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the fil...
CVE-2015-10111
creationtimestamp| type| source ---|---|--- 2023-06-04 16:27:42+00:00| seen| https://t.me/cibsecurity/64967...
CVE-2015-10111
CVE-2015-10111 affects Watu Quiz Plugin for WordPress (versions up to 2.6.7). The vulnerability is in the watu_exams function (file controllers/exam.php) where the quiz parameter is manipulated to cause SQL injection. The issue can be triggered remotely. A fix is available in version 2.6.8, and t...
CVE-2015-10110 ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting
A vulnerability classified as problematic was found in ruddernation TinyChat Room Spy Plugin up to 1.2.8 on WordPress. This vulnerability affects the function wpshowroomspy of the file room-spy.php. The manipulation of the argument room leads to cross site scripting. The attack can be initiated...
CVE-2015-10110
Summary (CVE-2015-10110): Vulnerability in the WordPress plugin “ruddernation TinyChat Room Spy Plugin” (versions up to 1.2.8). The flaw resides in the function wp_show_room_spy (room-spy.php); manipulating the argument room enables cross-site scripting. Attacks can be initiated remotely. A fix i...
CVE-2015-10108
The CVE-2015-10108 entry concerns the meitar Inline Google Spreadsheet Viewer Plugin for WordPress (up to version 0.9.6). The vulnerability affects the displayShortcode function in inline-gdocs-viewer.php and enables cross-site request forgery (CSRF) with remote attack potential. A patch exists: ...
CVE-2015-10107
CVE-2015-10107 affects the Simplr Registration Form Plus+ WordPress plugin up to version 2.3.4. The vulnerability is a cross-site scripting flaw caused by an issue in a processing path, allowing remote initiation of an attack. The issue is mitigated by upgrading to version 2.3.5, with the patch i...
Medium: libplist
Issue Overview: A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The name of the patch is...
CVE-2015-10106
CVE-2015-10106 concerns the TYPO3 extension mback2k mh_httpbl (versions up to 1.1.7). The vulnerability resides in the function moduleContent of mod1/index.php, enabling remote SQL injection. Upgrade to version 1.1.8 to fix (patch 429f50f4e4795b20dae06735b41fb94f010722bf; VDB-230086). This is doc...
CVE-2015-20108
creationtimestamp| type| source ---|---|--- 2023-05-27 22:37:44+00:00| seen| https://t.me/cibsecurity/64742...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
The CVE-2015-20108 issue affects the ruby-saml gem prior to 1.0.0, where xml_security.rb enables XPath injection and code execution because prepared statements are not used. Affected component: ruby-saml XML security handling. Root cause: lack of prepared statements in XPath processing leads to i...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
Wireshark 1.10.x < 1.10.14 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.10.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.14 advisory. - epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12....
[SECURITY] [DLA 3432-1] python2.7 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3432-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 24, 2023 https://wiki.debian.org/LTS -...