CVE-2014-10383

The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...

Design/Logic Flaw

The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...

Remote file inclusion

The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...

Cross site request forgery (csrf)

The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...

CVE-2014-10385

The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...

CVE-2014-10385

CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...

CVE-2014-10384

The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...

CVE-2014-10384

CVE-2014-10384 affects the memphis-documents-library WordPress plugin prior to version 3.0. The root cause is Local File Inclusion (LFI), allowing an attacker to access local files via the vulnerable plugin. Remote/unsanitized input handling is identified in the CVE entries, with multiple nationa...

CVE-2014-10383

The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...

CVE-2014-10383

The memphis-documents-library plugin for WordPress (before 3.0) is affected by a Remote File Inclusion vulnerability. The root cause is an input handling/validation weakness that can lead to inclusion of remote files, with potential compromise of affected sites. Mitigation per sources is to updat...

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.

The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.

The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...

Unspecified vulnerability in cPanel (CNVD-2019-29021)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability by forging...

Microsoft Office365 / ProPlus 16.0.11901.20204 Code Execution / Protection Bypass

Exploit Title: Microsoft Office Code Execution/Protection Bypass Exploit Author: Social Engineering Neo - @EngineeringNeo Software Link: https://products.office.com/en-nz/compare-all-microsoft-office-products Version: Office365/ProPlus - build 16.0.11901.20204 Tested on: Windows - build 18362.295...

USN-4102-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. CVE-2019-9850, CVE-2019-9851 It was discovered that LibreOffice incorrectly handled...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2019-29261)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader has a buffer overflow vulnerability, an attacker can use the vulnerability ...

CVE-2019-1158

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

CVE-2019-1154

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

CVE-2019-1143

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

PT-2019-3005 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain sensitive...