4173 matches found
CVE-2019-15116
CVE-2019-15116 affects the WordPress Easy Digital Downloads plugin prior to version 2.9.16. The vulnerability is a cross-site scripting (XSS) flaw associated with how IP addresses are logged, and multiple sources describe it as stored XSS. Impact is client-side script execution when vulnerable da...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2015-9324
The CVE-2015-9324 entry concerns the WordPress Easy Digital Downloads plugin prior to version 2.3.3, which is affected by a SQL injection vulnerability. The connected documents corroborate SQL injection as the issue (WordPress plugin data; Red Hat/CNVD entries; WPVulndb). The root cause is improp...
PT-2019-7283 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: easy-digital-downloads plugin versions prior to 2.3.3 Description: The issue is related to SQL injection in the easy-digital-downloads plugin for WordPress. Recommendations: For versions prior to 2.3.3, update to version 2.3.3 or later to...
PT-2019-13996 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: easy-digital-downloads plugin versions prior to 2.9.16 Description: The issue is related to cross-site scripting XSS in the context of IP address logging. This means an attacker could potentially inject malicious scripts into the website,...
August 16, 2019—KB4512494 (OS Build 16299.1365)
None None...
Malicious Package
cage-js is a malicious package. It downloads and runs malicious code from remote server as postinstall script...
Malicious Package
next-util is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
midway-dataproxy is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
cicada-render is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
diamond-clien is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
hsf-clients is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
tiar is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
river-mock is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
secureidentityloginmodule is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
qingting is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
CVE-2019-9886
CVE-2019-9886 affects BroadLearning eClass up to version ip.2.5.10.2.1, where arbitrary files can be downloaded without authentication via URLs containing download_attachment.php under templates or home folders. Root cause/impact: unauthenticated access to sensitive files (no login required). Pub...
CVE-2018-20073
Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...
