2849 matches found
ISC BIND DoS Vulnerability (CVE-2012-1667) - Windows
ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Real Cookie Banner < 3.4.10 - Contributor+ Stored XSS
The plugin does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. PoC Exploit shortcode: rcb-consent class='"...
Real Cookie Banner < 3.4.10 - Contributor+ Stored XSS
The plugin does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. Exploit shortcode: rcb-consent class='"...
Western Digital My Cloud Multiple Products 5.x < 5.25.124 Multiple Vulnerabilities (WDC-22019)
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
Python DoS Vulnerability (Oct 2022) - Windows
Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...
TYPO3 Sensitive Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-016)
TYPO3 is prone to a sensitive information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...
WordPress Plugin 'AdRotate Banner Manager' < 5.9.1 XSRF
The WordPress application running on the remote host has a version of the 'AdRotate Banner Manager' plugin that is prior to 5.9.1. It is, therefore, affected by a cross-site request forgery XSRF vulnerability. A remote attacker can, with the interaction of a privileged user, execute actions, such...
iSpyConnect iSpy Detection (HTTP)
HTTP based detection of iSpyConnect iSpy. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribut...
CVE-2022-26366
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
CVE-2022-26366
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
CVE-2022-26366
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
CVE-2022-26366 WordPress AdRotate Banner Manager Plugin <= 5.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
CVE-2022-26366
CVE-2022-26366 affects the WordPress AdRotate Banner Manager Plugin, specifically versions <= 5.9. It describes a CSRF/XSRF vulnerability that can enable an attacker to perform privileged actions (e.g., password changes) under a user’s authentication. The issue is tied to ads/banner management...
CVE-2022-26366 WordPress AdRotate Banner Manager Plugin <= 5.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...
WordPress Beautiful Cookie Consent Banner plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...
WordPress plugin AdRotate Banner Manager 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2022-17814 · WordPress · Adrotate Banner Manager Plugin
Name of the Vulnerable Software and Affected Versions: AdRotate Banner Manager Plugin versions = 5.9 Description: The issue is related to Cross-Site Request Forgery CSRF in the AdRotate Banner Manager Plugin on WordPress. Recommendations: For AdRotate Banner Manager Plugin versions = 5.9, update ...
CVE-2022-3823
The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
CVE-2022-3823
The CVE-2022-3823 entry concerns the WordPress plugin Beautiful Cookie Consent Banner (versions prior to 2.9.1). The issue is a failure to sanitise and escape certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (su...