CVE-2015-4065

Cross-site scripting XSS vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the post parameter to wp-admin/post-new.php...

CVE-2015-4065

Cross-site scripting XSS vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the post parameter to wp-admin/post-new.php...

CVE-2015-4065

Summary (CVE-2015-4065) : The WordPress Landing Pages plugin (versions before 1.8.5) contains an XSS vulnerability in shared/shortcodes/inbound-shortcodes.php. An authenticated remote user can inject arbitrary script/HTML via the post parameter passed to wp-admin/post-new.php, caused by echoing u...

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+...

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities

Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+ Vulnerable version: 1.8.4 Fixed version: 1.8.5 CVE: CVE-2015-4064,...

WordPress Landing Pages 1.8.4 Cross Site Scripting / SQL Injection Vulnerabilities

WordPress Landing Pages plugin version 1.8.4 suffers from cross site scripting and remote SQL injection vulnerabilities. Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage:...

CVE-2015-4065

creationtimestamp| type| source ---|---|--- 2015-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37108...

WordPress Landing Pages 1.8.4 Cross Site Scripting / SQL Injection

Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/landing-pages/ Active installs: 20,000+ Vulnerable version: 1.8.4 Fixed version: 1.8.5 CVE: CVE-2015-4064,...

CVE-2014-4065

Microsoft Internet Explorer (versions 6–11) contains a memory corruption vulnerability exploitable via a crafted web page, leading to remote code execution. ZDI advisories describe use-after-free flaws in various IE components (e.g., CAttrArray, CFieldSetLayout, CTableCell, CMarkup, etc.) that at...

Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4065)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (uncredentialed check)

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.x prior to 8.5.3 FP6. It is, therefore, affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email...

IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (credentialed check)

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 6 installed. It is, therefore, reportedly affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email message...

CVE-2013-4065

CVE-2013-4065 is an XSS vulnerability in IBM Domino’s iNotes that affects IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 when ultra‑light mode is enabled. The flaw lets remote attackers inject arbitrary web script or HTML via active content in an e‑mail message (SPR TCLE98ZKRP). Connect...

Slackware Advisory SSA:2008-270-01 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2008-270-01. OpenVAS Vulnerability Test $Id: esoftslkssa200827001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-269-01 mozilla-firefox

The remote host is missing an update as announced via advisory SSA:2008-269-01. OpenVAS Vulnerability Test $Id: esoftslkssa200826901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2008-269-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : libvorbis on SL5.x, SL4.x, SL3.x i386/x86_64

Several flaws were found in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash or execute arbitrary code when it was opened. CVE-2007-3106, CVE-2007-4029, CVE-2007-4065...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060,...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-40...

SuSE 11.1 Security Update : pango (SAT Patch Number 4065)

Specially crafted font files could cause a heap corruption in applications linked against pango. CVE-2011-0064 / CVE-2011-0020 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...