11958 matches found
PT-2021-10718 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak in the inavi add ientry function. Recommendations: For FFmpeg version 4.2, at the moment, there is no information about a newer version that contains a fix...
WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting
Exploit Title: WordPress Plugin Photo Gallery by 10Web alert1; 4. Click Save and preview. 5. It will show pop-up confirming existence of XSS vulnerability Timeline 09-01-2019 - Vulnerability Reported 09-03-2019 - Vendor responded 09-04-2019 - New version released 1.5.35 09-10-2019 - Full Disclosu...
WordPress Sell Downloads 1.0.86 Plugin - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: email protected Discovery Date: September 09,2019 Vendor Homepage:...
WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting
Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: September 09,2019 Vendor Homepage: https://wordpress.dwbooster.com/content-tools/sell-downloads Software Link :...
WordPress iThemes Exchange Easy US Sales Taxes Add-on Plugin Cross-Site Scripting Vulnerability
iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. easy US Sales Taxes Add-on is one of the sales tax calculation plugins. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Easy US Sales Taxes Add-...
September 3, 2019, update for Office 2016 (KB4475580)
None None...
WordPress iThemes Exchange Authorize.net Add-on Cross-Site Scripting Vulnerability
iThemes Exchange for WordPress is a plugin for creating e-commerce sites using the WordPress content management system. authorize.net Add-on is one of the Authorize Payment Gateway plugins. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Authorize.net Add-on. An attacker...
WordPress iThemes Exchange Invoices Add-on Cross-Site Scripting Vulnerability
iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. iThemes Exchange for WordPress is one of the shopping invoices plugin. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Invoices Add-on. An attacker...
Sentrifugo 3.2 - Persistent Cross-Site Scripting
Sentrifugo 3.2 - Persistent Cross-Site Scripting Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15814 Multiple Stored XSS...
CVE-2019-15769
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via addoption and updateoption...
CVE-2019-15753
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
CVE-2019-15753
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
Hardcoded credentials
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
CVE-2015-9374
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9371
Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9369
Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...
Design/Logic Flaw
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9364
2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...