Siemens IE/WSN-PA Link WirelessHART Gateway Cross-Site Scripting Vulnerability

The IE/WSN-PA Link is a gateway that connects the WirelessHART network to Industrial Ethernet. A cross-site scripting vulnerability exists in the Siemens IE/WSN-PA Link WirelessHART Gateway. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

Description of the security update for SharePoint Server 2019: September 10, 2019

None None...

Limesurvey Information Disclosure Vulnerability (CNVD-2019-31189)

LimeSurvey formerly known as PHPSurveyor is a set of open source online questionnaire survey program from the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection. A security vulnerability exists in Limesurvey versions prior to 3.17.14. An...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2019-32207)

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . A cross-site scripting vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by attackers to execute client-side code...

CVE-2019-16187

Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script...

CVE-2019-16187

Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script...

CVE-2019-16187

Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script...

Mautic cross-site scripting vulnerability (CNVD-2019-31196)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Mautic version 2.13.1, which can be exploited by an attacker to execute client-side code...

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

WordPress CarSpot theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.CarSpot theme is a plugin used in one of the car sales website themes. A cross-site scripting vulnerability exists in...

WordPress my-calendar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-calendar is a calendar customization plugin that is used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress iThemes Exchange Easy US Sales Taxes Add-on Plugin Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. easy US Sales Taxes Add-on is one of the sales tax calculation plugins. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Easy US Sales Taxes Add-...

WordPress iThemes Exchange Membership Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. membership Add-on is one of the plugins for website membership functionality. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Membership Add-on...

WordPress updraftplus plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress redirection plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

Knowage Cross-Site Scripting Vulnerability

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WE...

WordPress redirection plugin cross-site scripting vulnerability (CNVD-2019-30388)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

WordPress sharebar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A cross-site scripting vulnerability exists in the WordPress shareba...

WordPress Related Posts Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content. WordPress Related Posts plugin version 1.8.2 before the cross-site scripting...

WordPress akismet plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. akismet is a spam filtering plugin used in it. A cross-site scripting vulnerability exists in the WordPress akismet plugin. An attacke...