60 matches found
[SECURITY] [DSA 3332-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3332-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst August 11, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3328-2] wordpress regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3328-2 [email protected] https://www.debian.org/security/ Thijs Kinkhorst August 04, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3328-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3328-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst August 04, 2015 https://www.debian.org/security/faq -...
CVE-2015-5622
Cross-site scripting XSS vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.ph...
CVE-2015-5622
Cross-site scripting XSS vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.ph...
CVE-2015-5622
CVE-2015-5622 concerns the robustness of WordPress shortcode HTML tag filtering. The patch tightened the parsing in wp-includes/kses.php and related shortcode handling, with fixes released around WordPress 4.2.x and culminating in WordPress 4.2.3. Debian advisories also note fixes for this CVE in...
Debian: Security Advisory (DSA-3328-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-5622
The CVE-2014-5622 entry concerns the Android app Follow Mania for Instagram (com.followmania) version 1.2.1. The affected component is the SSL certificate validation when establishing TLS connections; the app does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-mi...
CVE-2013-5622
CVE-2013-5622 is rejected/not used and does not represent an active vulnerability entry.
CVE-2012-5622
OpenShift CSRF in the management console (openshift-console/app/controllers/application_controller.rb) of OpenShift 0.0.5 allows an attacker to hijack user sessions. The issue is confirmed across multiple sources (RHSA-2012:1555, Veracode summary, CVE-2012-5622). Root cause: improper CSRF protect...
VxWorks Detection
Binary data 5622.prm...
openSUSE Security Update : phpMyAdmin (phpMyAdmin-442)
This is a version upgrade to phpMyAdmin 2.11.9.4 to fix various security bugs. CVE-2008-2960, CVE-2008-3197, CVE-2008-1149, CVE-2008-1567, CVE-2008-1924, CVE-2008-4096, CVE-2008-4326, CVE-2008-5621, CVE-2008-5622 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
Mandrake Security Advisory MDVSA-2009:026 (phpMyAdmin)
The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2009:026. OpenVAS Vulnerability Test $Id: mdksa2009026.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:026 phpMyAdmin Authors: Thomas Reinke Copyright: Copyright c 2009...
CVE-2008-5622
CVE-2008-5622 is not a standalone active entry; it is listed together with CVE-2008-5621 in multiple advisories. Connected sources (Gentoo GLSA 200903-32, openSUSE/SUSE plugin references, and Debian/Gentoo/Nessus entries) describe phpMyAdmin vulnerabilities as CSRF-related, with vectors including...
SQL injection through XSRF on several pages
PMASA-2008-10 Announcement-ID: PMASA-2008-10 Date: 2008-12-09 Summary SQL injection through XSRF on several pages Description A logged-in user can be subject of SQL injection through cross site request forgery. Several pages which use affected library in phpMyAdmin are vulnerable and the attack c...
CVE-2007-5622
3proxy (versions 0.5 up to 0.5.3i) contains a double-free vulnerability in the ftpprchild() function. The flaw occurs when handling OPEN commands to the FTP proxy, where param->hostname is freed twice (once before parsehostname(), which frees it again). This can allow a remote attacker to caus...
CVE-2006-5622
CVE-2006-5622 affects Coppermine Photo Gallery 1.4.9, where SQL injection is possible in picmgr.php via the aid parameter. This could allow remote attackers to execute arbitrary SQL commands. The provided documents do not specify a fixed version patch or remediation, and exploitation details are ...