131 matches found
CVE-2015-4064
The CVE-2015-4064 entry corresponds to the WordPress Landing Pages plugin (
WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities
WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+...
WordPress Landing Pages 1.8.4 Cross Site Scripting / SQL Injection Vulnerabilities
WordPress Landing Pages plugin version 1.8.4 suffers from cross site scripting and remote SQL injection vulnerabilities. Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage:...
CVE-2015-4064
creationtimestamp| type| source ---|---|--- 2015-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37108...
WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities
Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+ Vulnerable version: 1.8.4 Fixed version: 1.8.5 CVE: CVE-2015-4064,...
WordPress Landing Pages 1.8.4 Cross Site Scripting / SQL Injection
Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+ Vulnerable version: 1.8.4 Fixed version: 1.8.5 CVE: CVE-2015-4064,...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerabilities (2984615)
This host is missing an important security update according to Microsoft Bulletin MS14-045. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-4064
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly handle use of the paged kernel pool for allocation of uninitialized memory, which allows...
CVE-2014-4064
CVE-2014-4064 is a Windows kernel-information-disclosure vulnerability caused by improper use of the paged kernel pool to allocate uninitialized memory in kernel-mode drivers. A local attacker could exploit this to read kernel memory addresses on vulnerable Windows editions (Vista SP2, Server 200...
MS14-045: Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation of Privilege (2984615)
The remote Windows host is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the Windows kernel-mode driver due to improper usage of window handle thread-owned objects. A local attacker could execute a specially crafted application in kernel mode to take...
IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (credentialed check)
The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 6 installed. It is, therefore, reportedly affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email message...
IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (uncredentialed check)
According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.x prior to 8.5.3 FP6. It is, therefore, affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email...
CVE-2013-4064
CVE-2013-4064 is an XSS vulnerability affecting IBM Domino iNotes when ultra-light mode is enabled. The NVD entry specifies affected versions as IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, with the flaw exploitable by remote authenticated users via unspecified vectors. The descripti...
CVE-2012-4064
Eucalyptus before 3.1.1 is vulnerable: external SOAP messages are not properly restricted, allowing remote authenticated users to escalate privileges by sending a crafted internal-format message to Cloud Controller or Walrus with a modified user id. This is documented in multiple sources (e.g., R...
Slackware Advisory SSA:2008-270-01 mozilla-thunderbird
The remote host is missing an update as announced via advisory SSA:2008-270-01. OpenVAS Vulnerability Test $Id: esoftslkssa200827001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Fedora Update for phpMyAdmin FEDORA-2011-15469
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-4064
Cross-site scripting XSS vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value...
CVE-2011-4064
Cross-site scripting XSS vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value...
CVE-2011-4064
Cross-site scripting XSS vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value...
CVE-2011-4064
CVE-2011-4064 is a cross-site scripting (XSS) vulnerability affecting phpMyAdmin in the Setup Interface for the 3.4.x line, with exploitation possible via a crafted value and impact limited to user-visible script/HTML injection. The vulnerability is tied to phpMyAdmin versions before 3.4.6 (3.4.x...