4946 matches found
CVE-2014-10383
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
CVE-2014-10383
The memphis-documents-library plugin for WordPress (before 3.0) is affected by a Remote File Inclusion vulnerability. The root cause is an input handling/validation weakness that can lead to inclusion of remote files, with potential compromise of affected sites. Mitigation per sources is to updat...
CVE-2014-10384: Improper Input Validation
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...
PT-2019-7061
Name of the Vulnerable Software and Affected Versions memphis-documents-library plugin versions prior to 3.0 Description The issue concerns a Cross-Site Scripting XSS vulnerability. It is exploited via the $ REQUEST variable. Recommendations For versions prior to 3.0, update to version 3.0 or lat...
CVE-2014-10385: Improper Neutralization of Input During Web Page Generation
The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...
CVE-2014-10383: Improper Input Validation
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
PT-2019-7059
Name of the Vulnerable Software and Affected Versions memphis-documents-library plugin versions prior to 3.0 for WordPress Description The issue concerns a Remote File Inclusion problem. There is no information provided about the estimated number of potentially affected devices worldwide or detai...
Unspecified vulnerability in cPanel (CNVD-2019-29021)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability by forging...
PT-2019-7060
Name of the Vulnerable Software and Affected Versions memphis-documents-library plugin versions prior to 3.0 for WordPress Description The issue concerns a Local File Inclusion problem. Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue...
Windows Font Library Code Execution
The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...
Windows Font Library Code Execution
The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...
Microsoft Office365 / ProPlus 16.0.11901.20204 Code Execution / Protection Bypass
Exploit Title: Microsoft Office Code Execution/Protection Bypass Exploit Author: Social Engineering Neo - @EngineeringNeo Software Link: https://products.office.com/en-nz/compare-all-microsoft-office-products Version: Office365/ProPlus - build 16.0.11901.20204 Tested on: Windows - build 18362.295...
USN-4102-1 libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. CVE-2019-9850, CVE-2019-9851 It was discovered that LibreOffice incorrectly handled...
Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2019-29261)
Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader has a buffer overflow vulnerability, an attacker can use the vulnerability ...
CVE-2019-1154
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...
CVE-2019-1158
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...
CVE-2019-1143
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...
PT-2019-2997 · Microsoft · Windows Gdi +1
Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain sensitive...
PT-2019-3005 · Microsoft · Windows Gdi +1
Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain sensitive...