36255 matches found
CVE-2015-9332
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI...
CVE-2015-9318
CVE-2015-9318 affects the WordPress plugin Awesome Support prior to 3.1.7. The vulnerability is that shortcodes are allowed in replies, stemming from the plugin’s handling of reply content. According to NVD, the issue has CVSS v2 base score 5.0 (MEDIUM) with impact on integrity while allowing net...
CVE-2015-9317
The CVE-2015-9317 entry concerns the WordPress plugin Awesome Support (before 3.1.7). Affected component: the plugin’s handling of custom information messages in the UI. Root cause: cross-site scripting (XSS) vulnerability that allows injection of client-side code via information messages. Impact...
GLSA-201908-06 : glibc: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201908-06 glibc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities
Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2015-9322
The CVE concerns the WordPress plugin erident-custom-login-and-dashboard (before version 3.5), where CSRF is reported. Multiple connected sources corroborate CSRF as the underlying issue (CVE entry, Red Hat advisory, CNVD, CVE List, CVE record). The NVD details show CVSS scores: CVSS v2 base 6.8 ...
CVE-2015-9322
The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2015-9324
The CVE-2015-9324 entry concerns the WordPress Easy Digital Downloads plugin prior to version 2.3.3, which is affected by a SQL injection vulnerability. The connected documents corroborate SQL injection as the issue (WordPress plugin data; Red Hat/CNVD entries; WPVulndb). The root cause is improp...
CVE-2015-9326
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...
CVE-2015-9325
The visitors-online plugin before 0.4 for WordPress has SQL injection...
CVE-2015-9325
The CVE-2015-9325 entry corresponds to a SQL injection vulnerability in the WordPress plugin visitors-online (versions prior to 0.4). The vulnerability is triggered via the plugin’s handling of input in SQL context, allowing manipulation of SQL commands (as per the consolidated sources). Impact i...
CVE-2015-9326
CVE-2015-9326 affects the WordPress plugin wp-business-intelligence-lite prior to version 1.6.3. The vulnerability is a SQL injection in the plugin that could allow an attacker to execute arbitrary SQL commands, with impact described as high (NVD CVSS2: 7.5, high; CVSS3: 9.8, critical). Affected ...
CVE-2015-9326
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...
CVE-2015-9290
In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1GetPrivateDict where there is no check that the new values of cur and limit are sensible before going to Again...
Debian: Security Advisory (DLA-1887-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-9307
creationtimestamp| type| source ---|---|--- 2019-08-14 20:38:33+00:00| seen| https://t.me/cibsecurity/6145...