35966 matches found
CVE-2015-9310
CVE-2015-9310 affects the WordPress plugin “All In One WP Security & Firewall”
CVE-2015-9311
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...
CVE-2015-9311
The CVE-2015-9311 entry concerns the WordPress plugin newstatpress prior to version 1.0.6, which is affected by a reflected XSS vulnerability. The issue is documented consistently across multiple sources (NVD, Red Hat advisory, CNVD, OpenVAS NASL entry) as an XSS in the plugin. Impact details in ...
CVE-2015-9312
CVE-2015-9312 affects the WordPress plugin NewStatPress prior to 1.0.5 (observed in templates and RedHat/NVD entries). The vulnerability is a cross-site scripting (XSS) flaw in includes/nsp_search.php where GET parameters are used unsafely, with outputs escaping issues that allow injected script....
CVE-2015-9312
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...
CVE-2015-9313
CVE-2015-9313: The WordPress plugin newstatpress (before 1.0.5) is affected by an SQL injection through an IMG element. The root cause is unsafe SQL construction in the plugin’s search path (nsp_search.php), enabling an attacker to potentially disclose data (PoC shows exfiltration of user hashes)...
CVE-2015-9314
The CVE-2015-9314 entry concerns the WordPress plugin NewStatPress, affected versions prior to 1.0.4. The vulnerability is an XSS issue tied to the Referer header, impacting the plugin’s handling of HTTP Referer data. Several connected sources corroborate the same flaw (XSS related to Referer hea...
CVE-2015-9315
The CVE-2015-9315 entry concerns the WordPress plugin NewStatPress , affected versions before 1.0.1 . According to the sources, this plugin contains an SQL injection vulnerability, enabling an attacker to potentially read or modify data associated with the site via a vulnerable input path. The CV...
CVE-2015-9316
The CVE applies to the WordPress WP Fastest Cache plugin before 0.8.4.9. Vulnerable component: wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request, where the poll_id parameter is unsafely used in a SQL query, enabling SQL injection. Root cause: improper sanitization/escaping in the AJAX hand...
Debian: Security Advisory (DSA-4497-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4497-1 : linux - security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2015-8553 Jan Beulich discovered that CVE-2015-2150 was not completely addressed. If a PCI physical function is passed through to a Xen guest, th...
CVE-2015-9293
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:17+00:00| seen| https://t.me/cibsecurity/6103...
CVE-2015-9294
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:16+00:00| seen| https://t.me/cibsecurity/6102...
CVE-2015-9295
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:15+00:00| seen| https://t.me/cibsecurity/6101...
CVE-2015-9296
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:14+00:00| seen| https://t.me/cibsecurity/6100...
CVE-2015-9297
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:13+00:00| seen| https://t.me/cibsecurity/6099...
CVE-2015-9298
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:12+00:00| seen| https://t.me/cibsecurity/6098...
CVE-2015-9299
creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:11+00:00| seen| https://t.me/cibsecurity/6097...