CVE-2015-9322

The CVE concerns the WordPress plugin erident-custom-login-and-dashboard (before version 3.5), where CSRF is reported. Multiple connected sources corroborate CSRF as the underlying issue (CVE entry, Red Hat advisory, CNVD, CVE List, CVE record). The NVD details show CVSS scores: CVSS v2 base 6.8 ...

CVE-2015-9324

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...

CVE-2015-9324

The CVE-2015-9324 entry concerns the WordPress Easy Digital Downloads plugin prior to version 2.3.3, which is affected by a SQL injection vulnerability. The connected documents corroborate SQL injection as the issue (WordPress plugin data; Red Hat/CNVD entries; WPVulndb). The root cause is improp...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

CVE-2015-9326

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

CVE-2015-9325

The CVE-2015-9325 entry corresponds to a SQL injection vulnerability in the WordPress plugin visitors-online (versions prior to 0.4). The vulnerability is triggered via the plugin’s handling of input in SQL context, allowing manipulation of SQL commands (as per the consolidated sources). Impact i...

CVE-2015-9326

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

CVE-2015-9326

CVE-2015-9326 affects the WordPress plugin wp-business-intelligence-lite prior to version 1.6.3. The vulnerability is a SQL injection in the plugin that could allow an attacker to execute arbitrary SQL commands, with impact described as high (NVD CVSS2: 7.5, high; CVSS3: 9.8, critical). Affected ...

CVE-2015-9290

In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1GetPrivateDict where there is no check that the new values of cur and limit are sensible before going to Again...

Debian: Security Advisory (DLA-1887-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-9307

creationtimestamp| type| source ---|---|--- 2019-08-14 20:38:33+00:00| seen| https://t.me/cibsecurity/6145...

CVE-2015-9308

creationtimestamp| type| source ---|---|--- 2019-08-14 20:34:01+00:00| seen| https://t.me/cibsecurity/6144...

CVE-2015-9309

creationtimestamp| type| source ---|---|--- 2019-08-14 20:34:00+00:00| seen| https://t.me/cibsecurity/6143...

CVE-2015-9310

creationtimestamp| type| source ---|---|--- 2019-08-14 20:33:59+00:00| seen| https://t.me/cibsecurity/6142...

CVE-2015-9312

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:27+00:00| seen| https://t.me/cibsecurity/6134...

CVE-2015-9313

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:26+00:00| seen| https://t.me/cibsecurity/6133...

CVE-2015-9314

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:25+00:00| seen| https://t.me/cibsecurity/6132...

CVE-2015-9315

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:24+00:00| seen| https://t.me/cibsecurity/6131...

CVE-2015-9307

CVE-2015-9307 affects the WordPress plugin wp-google-map-plugin prior to version 2.3.10. The vulnerability is a CSRF flaw in the add/edit location feature, caused by insufficient request verification. Impact is partial confidentiality/integrity/availability according to CVSS 2.0/3.1 metrics; expl...

CVE-2015-9309

The CVE-2015-9309 entry concerns the WordPress plugin wp-google-map-plugin, which prior to version 2.3.10 has a CSRF vulnerability in the add/edit category feature. Public details from multiple sources confirm the affected software/versions and the CSRF flaw, with CVSS scores indicating medium to...