Dahua Network Keyboard and Face All-in-One Mainframe with Information Leakage Vulnerability

DH-NHB5000 is a new generation of full-touch network keyboard designed and developed by Dahua Corporation. An information leakage vulnerability exists in the Dahua Network Keyboard and Face All-in-One Host. An attacker can exploit the vulnerability to bypass authentication to obtain sensitive...

WordPress All-in-One WP Migration plugin <= 7.14 - Arbitrary Backup Download vulnerability

Arbitrary Backup Download vulnerability found by Kamil Vavra in WordPress All-in-One WP Migration plugin versions = 7.14. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.15...

CVE-2019-6190

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...

CVE-2013-5988

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

Cross site scripting

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

CVE-2013-5988

The CVE-2013-5988 entry concerns an XSS vulnerability in the All in One SEO Pack WordPress plugin (pre-2.0.3.1) exposed via the Search parameter. Affected software is the All in One SEO Pack WordPress plugin; vulnerable component is the Search parameter handling in versions before 2.0.3.1. The ro...

CVE-2013-5988

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

CVE-2020-6768

A path traversal vulnerability in the Bosch Video Management System BVMS NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affect...

Authentication flaw

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

XSS Vulnerability in Microplatform All-in-One System

SenDong Micro platform all-in-one station building system is the first all-in-one station building system based on SAAS architecture. XSS vulnerability exists in SenDong Micro platform all-in-one website builder system, which can be exploited by attackers to obtain website cookie information...

CVE-2019-6319

The CVE-2019-6319 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in HP DeskJet 3630 All-in-One Printers (models F5S43A–F5S57A, K4T93A–K4T99C, K4U00B–K4U03B, V3F21A–V3F22A) with firmware SWP1FN1912BR or higher. The vulnerability could allow a denial of service or device misconfi...

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

Cross site scripting

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

CVE-2019-16520

The All-in-One SEO Pack WordPress plugin (before version 3.2.7) is vulnerable to Stored XSS due to improper encoding of the SEO-specific description for posts via unsafe placeholder replacement. Affected: WordPress plugin All in One SEO Pack

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

all-in-one-seo-pack 3.2.7 Cross Site Scripting

Exploit Title: all-in-one-seo-pack 3.2.7 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\all-in-one-seo-pack" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://semperplugins.com/all-in-one-seo-pack-pro-version Software Link:...

PT-2019-10413 · WordPress · All-In-One-Schemaorg-Rich-Snippets

Name of the Vulnerable Software and Affected Versions: all-in-one-schemaorg-rich-snippets plugin versions prior to 1.5.0 Description: The issue concerns a cross-site scripting XSS flaw on the settings page. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or later to resolve...

CVE-2016-10867

The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...

WordPress All-in-One WP Migration plugin <= 6.97 - Cross-Site Scripting (XSS) vulnerability (admin backend)

Cross-Site Scripting XSS vulnerability admin backend found by Connum in WordPress All-in-One WP Migration plugin versions = 6.97. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.0...