347 matches found
GHSA-5V8V-GWMW-QW97 org.neo4j.procedure:apoc Path Traversal Vulnerability
Impact A Path Traversal Vulnerability found in the apoc.export. procedures of apoc plugins in Neo4j Graph database. The issue allows a malicious actor to potentially break out of the expected directory. The vulnerability is such that files could only be created but not overwritten. For the...
WordPress Read more By Adam Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Read more By Adam...
CVE-2022-38085
Cross-Site Request Forgery CSRF vulnerability in Read more By Adam plugin = 1.1.8 at WordPress...
CVE-2022-38085
Cross-Site Request Forgery CSRF vulnerability in Read more By Adam plugin = 1.1.8 at WordPress...
CVE-2022-38085 WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Read more By Adam plugin = 1.1.8 at WordPress...
CVE-2022-38085
CVE-2022-38085 corresponds to a CSRF vulnerability in the WordPress Read more By Adam plugin versions ≤ 1.1.8. Reports describe missing or insufficient CSRF checks in the plugin, allowing authenticated users to perform unintended actions on behalf of victims. Exploitation details are not uniforml...
CVE-2022-38085 WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Read more By Adam plugin = 1.1.8 at WordPress...
PT-2022-24193 · WordPress · Read More By Adam
Name of the Vulnerable Software and Affected Versions: Read more By Adam plugin version 1.1.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Read more By Adam plugin at WordPress, allowing unauthorized actions to be performed on behalf of a user without their...
WordPress plugin Read more By Adam 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Read more By Adam...
WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by ptsfence Patchstack Alliance in WordPress Read more By Adam plugin versions = 1.1.8. Solution No patched version is available. No reply from the vendor...
Malicious code in @adam_baldwin/sample_4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 157fb357cdb3276c31d81267de4c1bb20d9e43865b3e5000e37953ed1a58cad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-59 Malicious code in @adam_baldwin/sample_4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 157fb357cdb3276c31d81267de4c1bb20d9e43865b3e5000e37953ed1a58cad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross site scripting
Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...
CVE-2022-29422 WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...
CVE-2022-29422
CVE-2022-29422 concerns WordPress plugin Countdown & Clock (
CVE-2022-29422 WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...
CVE-2022-29420
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...
CVE-2022-29421
Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...