DEBIAN-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

UBUNTU-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

CVE-2013-6364 concerns the Horde Groupware Webmail Edition, where saving a search as a virtual address book is vulnerable to CSRF and XSS. The vulnerability arises in the webmail component when performing the save operation, enabling an attacker to induce cross-site requests or script execution i...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

Apple iOS Messages Component Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is an application component for sending text, photos and videos. An information disclosure vulnerability exists in the Messages component in versions of Apple iOS prior to 13, which can be exploited by an attacke...

Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...

iPhone iOS 13 Lockscreen Bypass Flaw Exposes Contacts

An iPhone lock screen bypass has been discovered that could enable an attacker to access victims’ address books, including their contacts’ names, email addresses, phone numbers, mailing addresses and more. The hack was first discovered by researcher Jose Rodriguez, an Apple enthusiast based in...

WordPress woo-address-book plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woo-address-book is a plugin for e-commerce sites that uses it to manage shipping addresses. A cross-site request forgery vulnerabilit...

CVE-2019-15770

The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...

WordPress WooCommerce Address Book plugin <= 1.5.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress WooCommerce Address Book plugin versions = 1.5.6. Solution Update the WordPress WooCommerce Address Book plugin to the latest available version at least 1.6.0...

WooCommerce Address Book < 1.6.0 - CSRF

The WooCommerce Address Book WordPress plugin was affected by a CSRF security vulnerability...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

Cross site request forgery (csrf)

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18523

The CVE-2017-18523 entry applies to the WordPress eelv-newsletter plugin: versions before 4.6.1 are affected by a CSRF in the address book. The vulnerability allows CSRF-enabled actions without sufficient user interaction, potentially enabling unintended requests. Public references in connected d...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18522

The CVE-2017-18522 entry concerns the eelv-newsletter WordPress plugin, prior to version 4.6.1. The vulnerability is an XSS flaw in the plugin’s address book, as described by multiple sources (including NVD and CNVD). Impact details in the documents indicate client-side code execution could be po...