FreeBSD : Gitlab -- Vulnerability (cdb5338d-04ec-11ee-9c88-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cdb5338d-04ec-11ee-9c88-001b217b3468 advisory. - A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8,...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-2103)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-10117

The CVE-2015-10117 entry concerns Gravity Forms DPS PxPay Plugin for WordPress, affected in versions up to 1.4.2. The vulnerability is a cross-site scripting flaw due to an unknown function, enabling remote execution of an attack. Remediation is upgrading to version 1.4.3, with patch identifier 5...

CVE-2015-10117 Gravity Forms DPS PxPay Plugin cross site scripting

A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.4.3 is able to address...

CVE-2015-10116

RealFaviconGenerator Favicon Plugin for WordPress (up to version 1.2.12) is affected. The vulnerability resides in install_new_favicon (admin/class-favicon-by-realfavicongenerator-admin.php), enabling cross-site request forgery (CSRF). Exploitation can be remotely initiated. A patch is available ...

CVE-2015-10113

creationtimestamp| type| source ---|---|--- 2023-06-05 20:28:38+00:00| seen| Telegram/m2vA5vwXgtjEoPUMgGnXm3wgyGCPKNN2UsNIsbMGegsjE4...

CVE-2015-10115

CVE-2015-10115 affects WooSidebars Sidebar Manager Converter Plugin for WordPress up to version 1.1.1, specifically the process_request function in classes/class-woosidebars-sbm-converter.php. The vulnerability allows an open redirect and can be triggered remotely. The issue is fixed by upgrading...

CVE-2015-3035

creationtimestamp| type| source ---|---|--- 2023-06-05 16:20:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/tplinkarcherc7traversal.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 13:14:49+00:00| seen|...

CVE-2015-10114

The CVE-2015-10114 entry describes a vulnerability in the WordPress WooSidebars plugin (versions up to 1.4.1) affecting the function enable_custom_post_sidebars in classes/class-woo-sidebars.php. The issue arises from manipulation of the sendback parameter, causing an open redirect. This could be...

CVE-2015-10113

Summary: CVE-2015-10113 affects the WordPress WooFramework Tweaks Plugin (up to v1.0.1). The vulnerability lies in the admin_screen_logic function where manipulation of the url argument enables an open redirect. The issue can be exploited remotely. A fix is available in version 1.0.2, with patch ...

CVE-2015-10112

creationtimestamp| type| source ---|---|--- 2023-06-05 12:28:25+00:00| seen| https://t.me/cibsecurity/64973...

CVE-2015-10112

CVE-2015-10112 affects the WordPress plugin WooFramework Branding up to version 1.0.1. The vulnerability resides in the function admin_screen_logic of wooframework-branding.php, where manipulation of the url argument enables an open redirect. This can be triggered remotely. The recommended remedi...

GitLab < 15.10.8 (CVE-2023-2015)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A...

Amazon Linux 2 : libplist (ALAS-2023-2067)

The version of libplist installed on the remote host is prior to 1.12-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2067 advisory. A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the fil...

CVE-2015-10111

creationtimestamp| type| source ---|---|--- 2023-06-04 16:27:42+00:00| seen| https://t.me/cibsecurity/64967...

CVE-2015-10111

CVE-2015-10111 affects Watu Quiz Plugin for WordPress (versions up to 2.6.7). The vulnerability is in the watu_exams function (file controllers/exam.php) where the quiz parameter is manipulated to cause SQL injection. The issue can be triggered remotely. A fix is available in version 2.6.8, and t...

CVE-2015-10110 ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting

A vulnerability classified as problematic was found in ruddernation TinyChat Room Spy Plugin up to 1.2.8 on WordPress. This vulnerability affects the function wpshowroomspy of the file room-spy.php. The manipulation of the argument room leads to cross site scripting. The attack can be initiated...

CVE-2015-10110

Summary (CVE-2015-10110): Vulnerability in the WordPress plugin “ruddernation TinyChat Room Spy Plugin” (versions up to 1.2.8). The flaw resides in the function wp_show_room_spy (room-spy.php); manipulating the argument room enables cross-site scripting. Attacks can be initiated remotely. A fix i...

CVE-2015-10108

The CVE-2015-10108 entry concerns the meitar Inline Google Spreadsheet Viewer Plugin for WordPress (up to version 0.9.6). The vulnerability affects the displayShortcode function in inline-gdocs-viewer.php and enables cross-site request forgery (CSRF) with remote attack potential. A patch exists: ...

CVE-2015-10107

CVE-2015-10107 affects the Simplr Registration Form Plus+ WordPress plugin up to version 2.3.4. The vulnerability is a cross-site scripting flaw caused by an issue in a processing path, allowing remote initiation of an attack. The issue is mitigated by upgrading to version 2.3.5, with the patch i...