76 matches found
Fedora 20 : wordpress-3.9.2-3.fc20 (2014-9264)
Upstream announcement: http://wordpress.org/news/2014/08/wordpress-3-9-2/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora Update for wordpress FEDORA-2014-9264
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-5205
wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack...
CVE-2014-5205
wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack...
CVE-2014-5205
CVE-2014-5205 affects WordPress before 3.9.2, where wp-includes/pluggable.php concatenates action and uid values in CSRF tokens without proper delimiters. This can enable remote attackers to bypass CSRF protection via brute-force. The issue is documented in WordPress security advisories and updat...
Debian DSA-3001-1 : wordpress - security update
Multiple security issues have been discovered in Wordpress, a web blogging tool, resulting in denial of service or information disclosure. More information can be found in the upstream advisory at https://wordpress.org/news/2014/08/wordpress-3-9-2/. %NASLMINLEVEL 70300 C Tenable Network Security,...
HP Intelligent Management Center < 5.2 E401 Multiple Vulnerabilities
The version of HP Intelligent Management Center running on the remote host is potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'opentoposymbolid' parameter of the 'topoContent.jsf' script. CVE-2012-5200 - Multiple code execution vulnerabiliti...
CVE-2012-5205
HP iMC/ANM (HP Intelligent Management Center and HP iMC for Automated Network Manager) before 5.2 E0401 contains multiple CVEs including CVE-2012-5205, enabling remote attackers to obtain sensitive information, modify data, or cause DoS via unspecified vectors. The connected materials corroborate...
CVE-2011-5205
Affected software: Rapidleech 2.3 rev42 SVN r358, rev43 SVN r397 and earlier. Vulnerable component: audl.php, with a cross-site scripting (XSS) flaw in the links parameter. Root cause: input in links parameter not properly sanitized, enabling injection of arbitrary script/HTML. Impact: remote att...
CVE-2010-5205
CVE-2010-5205 concerns untrusted search path vulnerabilities in e-press ONE Office Author, enabling local privilege escalation via Trojan horse DLLs (java_msci.dll or msci_java.dll) placed in the current working directory, demonstrated with a directory containing a .psw file. Connected records co...
CVE-2008-5205
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
CVE-2008-5205
CVE-2008-5205 describes a Cross‑site Scripting (XSS) vulnerability in the editing component (edit.php) of wellyblog. The flaw allows remote attackers to inject arbitrary script/HTML via the articleid parameter during an add action. Documented across multiple sources (NVD, CVE lists) confirms the ...
CVE-2008-5205
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
SuSE 10 Security Update : xine-lib (ZYPP Patch Number 5205)
Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot sequence in the dir parameter in 1 index.php and 2 forum/index.php, when the viewimage command in the gallery module is used...
