Debian Security Advisory DSA 3779-1 (wordpress - security update)

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to hijack victims OpenVAS Vulnerability Test $Id: deb3779.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3779-1 using nvtgen 1.0 Script version: 1.0 Author:...

[SECURITY] [DLA 813-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u13 CVE ID : CVE-2017-5488 CVE-2017-5489 CVE-2017-5490 CVE-2017-5491 CVE-2017-5492 CVE-2017-5493 CVE-2017-5610 CVE-2017-5611 CVE-2017-5612 Debian Bug : 851310 852767 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common...

WordPress < 4.7.1 Multiple Vulnerabilities

Binary data 9894.prm...

CVE-2017-5492

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

CVE-2017-5492

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

CVE-2017-5492

CVE-2017-5492 is a CSRF/vulnerability in WordPress 4.x where the widget-editing accessibility-mode feature could be abused to hijack a user’s authenticated session via actions in widgets (related to wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php). Affected versions before 4.7.1 ar...

CVE-2017-5492

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

[ASA-201701-22] wordpress: multiple issues

Arch Linux Security Advisory ASA-201701-22 ========================================== Severity: High Date : 2017-01-15 CVE-ID : CVE-2016-10033 CVE-2016-10045 CVE-2017-5487 CVE-2017-5488 CVE-2017-5489 CVE-2017-5490 CVE-2017-5491 CVE-2017-5492 CVE-2017-5493 Package : wordpress Type : multiple issue...

CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

CVE-2016-5492

CVE-2016-5492 describes an unspecified local vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite AK 2013. The issue allows local users to affect confidentiality and integrity via vectors related to SMB Users. The NVD entry rates the CVSSv3 impact...

CVE-2015-5492

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5492

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5492

CVE-2015-5492 : A cross-site scripting (XSS) vulnerability was reported in the Drupal Video Consultation module, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected are all versions of the Video Consultation module (Drupal core not affected). The iss...

CVE-2012-5492

Plone uid_catalog.py vulnerability: affects Plone before 4.2.3 and 4.3 before beta 1; remote attacker can obtain metadata about hidden objects via a crafted URL. Mitigation is to upgrade to Plone 4.2.3+ (or 4.3 beta1+ per advisories).

VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow

No description provided by source. $Id: verypdfpdfview.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CVE-2013-5492

Cisco SocialMiner’s administration.jsp contains an information-disclosure vulnerability (Bug CSCuh76780) that could allow an unauthenticated, remote attacker to obtain sensitive user information by sniffing HTTP traffic between a SocialMiner client and server. The issue stems from insecure HTTP h...

CVE-2013-5492

administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780...

Detection of Dangerous ActiveX Control

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: secpoddangerousactivexctrl.nasl 5672 2017-03-22 08:15:28Z teissa $ Detection of Dangerous ActiveX Control Authors: Sharath S Copyright c 200...

VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow

The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

CVE-2008-5492

CVE-2008-5492 affects the VeryDOC PDF Viewer OCX Control (pdfview.ocx 2.0.0.1). The issue is a heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX when parsing the first argument to the OpenPDF method, enabling remote code execution. Documented in CVE/NVD with a high CVSS, and corrobo...