6161 matches found
PHPMoAdmin RCE Vulnerability (Mar 2015) - Active Check
PHPMoAdmin is prone to a remote code execution RCE vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PT-2015-5564
Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 8.2b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The...
CVE-2015-2043: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...
CVE-2015-2040
Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...
CVE-2015-2040
Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...
CVE-2015-2040
CVE-2015-2040 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) version 2.8.26. The issue allows remote attackers to inject arbitrary script/HTML via the submit_time parameter on the CF7DBPluginSubmissions pa...
PT-2015-5561
Name of the Vulnerable Software and Affected Versions Contact Form DB plugin version 2.8.26 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the submit time parameter in the "CF7DBPluginSubmissions" page to "wp-admin/admin.php"...
CVE-2015-2040: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...
Potential SQL injection in PostgreSQL Zend\Db adapter
More info at https://framework.zend.com/security/advisory/ZF2015-02...
Potential SQL injection in PostgreSQL Zend\Db adapter
More info at https://framework.zend.com/security/advisory/ZF2015-02...
CVE-2015-1606
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
PT-2015-5386
Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.1.2 Description The issue concerns the keyring DB in GnuPG, which does not properly handle invalid packets. This allows remote attackers to cause a denial of service through a crafted keyring file, resulting in an...
BullGuard Internet Security 'BdAgent.sys' Driver Privilege Escalation Vulnerability
BullGuard Internet Security is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability
Summary u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review processes, personalized serial mails, PayPal payments and online surveys based on PHP and MySQL and Apache. Description u5CMS suffers from an authenticat...
WordPress Contact Form DB 2.8.26 Cross Site Scripting
Title: WordPress 'Contact Form DB' plugin - XSS Version: 2.8.26 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/contact-form-7-to-database-extension/ Contacted WordPress: 2015/01/26...
WP Symposium Plugin for WordPress Arbitrary File Upload
Added: 01/29/2015 BID: 71686 OSVDB: 116046 Background WP Symposium is a social network plugin for WordPress. Problem WP Symposium Plugin for WordPress contains a vulnerability that allows a remote attacker to execute arbitrary PHP code. This vulnerability is due to the...
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation Title : VLC Player 2.1.5 DEP Access Violation Vulnerability Discoverer: Veysel HATAS @muh4f1z Web page : www.binarysniper.net Vendor : VideoLAN VLC Project Test: Windows XP SP3 Status: Fixed Severity : High CVE ID : CVE-2014-9597 NIST:...
CVE-2015-0393
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the...
Code injection
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the...