36255 matches found
EulerOS 2.0 SP5 : compat-poppler022 (EulerOS-SA-2019-1803)
According to the version of the compat-poppler022 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to...
EulerOS 2.0 SP5 : perl (EulerOS-SA-2019-1800)
According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of...
CVE-2015-9334
The email-newsletter plugin through 20.15 for WordPress has SQL injection...
CVE-2015-9341
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files...
CVE-2015-9338
CVE-2015-9338 affects the WordPress wp-file-upload plugin prior to version 2.5.0. The vulnerability arises from insufficient restrictions on uploading PHP files, allowing potentially harmful PHP uploads through the plugin. Affected product is the wp-file-upload plugin for WordPress; root cause is...
CVE-2015-9339
The CVE-2015-9339 entry concerns the WordPress wp-file-upload plugin, affected up to versions prior to 2.7.1. The root cause described across connected sources is insufficient restrictions on uploading JavaScript (.js) files. Exploitation details or real-world impact are not provided in the docum...
CVE-2015-9339
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...
CVE-2015-9340
The CVE-2015-9340 entry refers to the WordPress wp-file-upload plugin prior to 3.0.0, which has insufficient restrictions on uploading PHP, JS, and related script/markup files (php5, phtml, html, htaccess, etc.). The connected Red Hat, CNVD/CVE, CVE records and WPVulnDB entry corroborate this iss...
CVE-2015-9341
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files...
CVE-2015-9341
The CVE-2015-9341 entry concerns the WordPress wp-file-upload plugin. Affected component: wp-file-upload plugin for WordPress (versions prior to 3.4.1). Root cause: insufficient restrictions on uploads of .php.js files, enabling potentially executable payloads via file upload. Documented impact: ...
CVE-2015-9337
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...
CVE-2015-9337
The CVE concerns the WordPress plugin Profile Builder. Before version 2.1.4, it has no access control for activating or deactivating addons via AJAX, enabling unauthorized addon management and potentially partial integrity impact. Affected software: WordPress Profile Builder plugin (pre-2.1.4). R...
CVE-2015-9337
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...
CVE-2015-9333
The cforms2 plugin before 14.6.10 for WordPress has SQL injection...
Sql injection
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
CVE-2015-9336
The CVE-2015-9336 entry concerns the WordPress plugin clean-login, prior to version 1.5.1, which has a reflected XSS vulnerability. Affected component: clean-login plugin for WordPress. Root cause: input reflected in the response without proper sanitization (XSS). Practical impact: potential exec...
CVE-2015-9335
CVE-2015-9335 : A SQL injection vulnerability exists in the WordPress limit-attempts plugin prior to version 1.1.1 during IP address handling. This affects the plugin used with WordPress, enabling potentially unauthorized SQL commands through crafted input. The CVSS indications show high impact (...
CVE-2015-9335
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...
CVE-2015-9333
CVE-2015-9333 affects WordPress cforms2 plugin versions prior to 14.6.10, with a SQL injection vulnerability in the plugin’s handling of inputs. Impact per sources includes the ability to execute illegal SQL commands (high severity). Remediation: upgrade to version 14.6.10 or later; no exploitati...