7228 matches found
Oracle TNS Listener VSNNUM Version Remote Information Disclosure
It was possible to extract the version number of the remote Oracle TNS Transparent Network Substrate listener remotely by sending an unauthenticated request to the TNS listener service operating on this port. This information could aid an attacker. Note that the version of the TNS listener does n...
WordPress Ultimate Member Access Restriction Bypass Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ultimate Member is one of the plug-ins used to create a membership site or online community. A security vulnerability exists...
CVE-2018-0590
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors...
CVE-2018-0589
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via unspecified vectors...
Authentication flaw
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via unspecified vectors...
Authentication flaw
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors...
CVE-2018-0589
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via unspecified vectors...
CVE-2018-0590
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors...
CVE-2018-0590
CVE-2018-0590 affects the WordPress plugin Ultimate Member, prior to version 2.0.4. The vulnerability allows remote authenticated attackers to bypass access restrictions and modify other users’ profiles via unspecified vectors due to an access‑control bypass in the plugin (CWE-284). Affected vers...
CVE-2018-0589
CVE-2018-0589 affects the WordPress plugin Ultimate Member, prior to version 2.0.4. The vulnerability enables a remote authenticated attacker to bypass access restrictions on the plugin and add a new form via the plugin’s Forms page. The issue is an access restriction bypass (CWE-284) and is repo...
PT-2018-5638 · Moxa · Moxa Edr-810
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA LOG.ini" without a cookie header,...
[ASA-201805-10] firefox: multiple issues
Arch Linux Security Advisory ASA-201805-10 ========================================== Severity: Critical Date : 2018-05-13 CVE-ID : CVE-2018-5150 CVE-2018-5151 CVE-2018-5152 CVE-2018-5153 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5160 CVE-2018-5163 CVE-2018-51...
Ultimate Member < 2.0.4 - Multiple Issues
XSS, Directory Traversal, Arbitrary File Upload, Access restriction Bypass...
JVN#28804532: Multiple vulnerabilities in WordPress plugin "Ultimate Member"
The WordPress plugin "Ultimate Member" provided by Ultimate Member contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0585 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...
PT-2018-2613
Name of the Vulnerable Software and Affected Versions Dasan GPON Routers affected versions not specified Description An issue was discovered on Dasan GPON home routers where Command Injection can occur via the dest host parameter in a "diag action=ping" request to a "GponForm/diag Form" URI. The...
OpenEMR < 5.0.1 Multiple Vulnerabilities (Mar 2018)
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
CVE-2018-10572
interface/patientfile/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and formbody parameters...
CVE-2018-10573
OpenEMR before 5.0.1 is vulnerable in interfaces/fax/fax_dispatch.php: remote authenticated users can bypass access restrictions via the scan parameter. Affected software is OpenEMR prior to 5.0.1; exploitation would require authenticated access. Impact includes bypassing authorization controls (...
Code injection
Brookins Consulting BC Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data...