47 matches found
PrestaShop <= 1.7.2.4 Multiple Vulnerabilities
PrestaShop is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-5682
PrestaShop 1.7.2.4 is affected by CVE-2018-5682: the reset-password flow enables user enumeration by observing which password reset attempts do not emit the generic “This account does not exist” message. Affected component is the Reset Password feature; root cause is inconsistent error messaging ...
CVE-2015-5682
The CVE concerns the WordPress Powerplay Gallery plugin, version 3.3, where upload.php allows remote attackers to create arbitrary directories through vectors related to the targetDir parameter. This is a remote, unauthenticated vulnerability that enables directory creation, potentially aiding fu...
CVE-2015-5682
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable...
CVE-2012-5682
CVE-2012-5682 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2006-5682
CVE-2006-5682 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-5682
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section...
CVE-2016-5682
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section...
CVE-2016-5682
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section...
CVE-2016-5682
Swagger-UI is affected by an XSS vulnerability in the Definitions section via the Default field, affecting versions before 2.2.1. The issue allows a remote attacker to inject script that could run in a victim’s browser and potentially steal cookie-based credentials. Remediation per the provided s...
indonetwork.co.id XSS vulnerability
Vulnerable URL: http://www.indonetwork.co.id/search?q=q%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
CVE-2017-5682
Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives,...
CVE-2017-5682
CVE-2017-5682 refers to a local privilege escalation in the PSET Application Install wrapper used by multiple Intel developer tools (Intel Parallel Studio XE, System Studio, VTune Amplifier, Inspector, Advisor, MPI Library, Trace Analyzer and Collector, MKL, IPP, DAAL, TBLS, and related cryptogra...
CVE-2014-5682
The CVE-2014-5682 entry refers to The Retale - Weekly Ads & Deals (com.retale.android) for Android v2.1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Connec...
Gentoo Security Advisory GLSA 200903-30 (opera)
The remote host is missing updates announced in advisory GLSA 200903-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200903-30 (opera)
The remote host is missing updates announced in advisory GLSA 200903-30. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...