UBUNTU-CVE-2015-2266

message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation

This plugin is prone to an unspecified privilege escalation vulnerability. Solution Update the plugin...

WordPress All in One Adsense YPN Plugin <= 2.0.1 - Cross Site Scripting

This plugin is prone to an unspecified cross site scripting vulnerability in all-in-one-adsense-&-ypn.php. Solution Update the plugin...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...

6: JSM policy not respected by deployed applications

It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the git-all-1.7.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information

The Linux-headers-2.6.18-4-all-mipsel package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information

The multiple vulnerabilities in the linux-headers-2.6.18-4-all package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.

The vulnerability of the git-all-1.7.1 package on the CentOS operating system can lead to a breach of protected information. Exploiting this vulnerability can be carried out remotely...

WordPress Plugin All In One WP Security & Firewall admin/wp-security-list-locked-ip.php SQL Injection Vulnerability

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.All In One WP Security & Firewall Plugin for WordPress is a Wordpress Security Plugin. The All In One WP Security &...

Wordpress The Semper Fi All in One SEO Pack Plugin Information Disclosure Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress The Semper Fi All in One SEO Pack plugin is a wordpress-based SEO plugin. WordPress The Semper Fi All in...

Multiple Generic Remote Code Execution Vulnerabilities in Bova NetDragon Information Security All-in-One PCs

Multiple remote code execution vulnerabilities exist in Bohua NetDragon Information Security All-in-One. An attacker can exploit the vulnerabilities to gain remote control of a web server host...

WordPress All In One WP Security And Firewall 3.9.0 SQL Injection

Exploit Title : WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Software Link :...

CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

CVE-2015-0902

The CVE-2015-0902 entry concerns the WordPress plugin All in One SEO Pack (pre-2.2.6). The underlying issue is that the plugin does not consider password protection when generating the Meta Description, enabling remote attackers to read HTML source and disclose sensitive information. Affected sof...

Apache Cassandra Remote Arbitrary Code Execution Vulnerability

Apache Cassandra is an open source distributed database management system developed by Facebook for storing exceptionally large data. Cassandra's default configuration binds unauthenticated JMX/RMI interfaces to all network interfaces. Since RMI is the API for transporting and remotely executing...

PT-2015-4956

Name of the Vulnerable Software and Affected Versions Semper Fi All in One SEO Pack plugin versions prior to 2.2.6 Description The issue allows remote attackers to obtain sensitive information by reading HTML source code because the plugin does not consider the presence of password protection...

CVE-2015-0902: Exposure of Sensitive Information to an Unauthorized Actor

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

All in One SEO Pack information management vulnerability

Overview All in One SEO Pack is a WordPress plugin. All in One SEO Pack automatically adds a meta tag "Meta Description" to a page using some part of its contents, and this behavior is enabled in the initial configuration. Meta Description can be added even when a page is password-protected,...