35966 matches found
CVE-2019-8007
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information...
CVE-2019-8022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary...
CVE-2015-9320
Option-Tree WordPress plugin (versions prior to 2.5.4) contains an XSS vulnerability tied to add_query_arg. Affected component is the plugin itself for WordPress; root cause involves insufficient input validation leading to client-side script execution. CVE-2015-9320 is documented with CVSS value...
CVE-2015-9319
CVE-2015-9319 concerns the WordPress plug‑in Gregs High Performance SEO (before 1.6.2) with a cross-site scripting (XSS) vulnerability in the context of an old browser. Multiple sources (NVD and vendor/security bulletins) corroborate that the flaw affects this plugin and is XSS‑related; exploitat...
CVE-2015-9318
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...
CVE-2015-9329
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS...
CVE-2015-9329
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS...
CVE-2015-9329
The CVE-2015-9329 entry concerns the WordPress plugin wp-all-import . It states that versions before 3.2.5 are vulnerable to reflected XSS . Product: WordPress plugin wp-all-import; Impact: user input reflected in responses leading to XSS; Root cause: improper sanitization/escaping in the affecte...
CVE-2015-9330
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...
CVE-2015-9330
The CVE-2015-9330 entry concerns the WordPress plugin wp-all-import, with a blind SQL injection vulnerability reported in versions before 3.2.5. Public sources (NVD, Red Hat, CNVD, CVE lists) consistently describe a SQL injection flaw in this plugin, aligned with a high/critical risk profile (CVS...
CVE-2015-9331
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit...
CVE-2015-9331
The CVE-2015-9331 flaw affects the WordPress plugin WP All Import, specifically versions up to 3.2.3 (CVE references also note
CVE-2015-9332
The CVE-2015-9332 issue affects the WordPress uninstall plugin (before v1.2). The vulnerability is a Cross-Site Request Forgery (CSRF) that can trigger uninstall to delete all database tables via wp-admin/admin-ajax.php?action=uninstall, as described in multiple sources (WordPress uninstall plugi...
CVE-2015-9332
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI...
CVE-2015-9318
CVE-2015-9318 affects the WordPress plugin Awesome Support prior to 3.1.7. The vulnerability is that shortcodes are allowed in replies, stemming from the plugin’s handling of reply content. According to NVD, the issue has CVSS v2 base score 5.0 (MEDIUM) with impact on integrity while allowing net...
CVE-2015-9317
The CVE-2015-9317 entry concerns the WordPress plugin Awesome Support (before 3.1.7). Affected component: the plugin’s handling of custom information messages in the UI. Root cause: cross-site scripting (XSS) vulnerability that allows injection of client-side code via information messages. Impact...
GLSA-201908-06 : glibc: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201908-06 glibc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities
Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...