8978 matches found
CVE-2017-18539
The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...
CVE-2017-18538
The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...
PT-2019-8472 · Unknown · Weblibrarian
Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.5 Description: The issue concerns a problem with front-end short codes, allowing for XSS attacks. Recommendations: For versions prior to 3.4.8.5, update to version 3.4.8.5 or later to resolve the...
PT-2019-18006 · Lenovo · Lenovo Diagnostics +2
Name of the Vulnerable Software and Affected Versions: Lenovo Solution Center version 03.12.003 Description: A reported issue could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center in April 2018 a...
PT-2019-8473 · WordPress · Weblibrarian
Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.6 for WordPress Description: The issue concerns a Cross-Site Scripting XSS vulnerability. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website,...
PT-2019-8474 · Unknown · Weblibrarian Plugin
Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.7 Description: The issue allows for cross-site scripting XSS attacks via front-end short codes. Recommendations: For versions prior to 3.4.8.7, update to version 3.4.8.7 or later to resolve the issu...
CVE-2019-4481
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IB...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Business Service Manager
Summary IBM WebSphere Application Server is shipped as a component of Tivoli Business Service Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Remot...
August 19, 2019—KB4512509 (OS Build 17134.984)
None None...
August 17, 2019—KB4512534 (OS Build 17763.720)
None None...
August 17, 2019—KB4512495 (OS Build 14393.3181)
None None...
Input validation
The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input...
SQL injection vulnerability in the front-end am***.php page of S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end am.php page of S-CMS School Building System. Attackers can use the vulnerability...
BlockDev Sp. Z o.o: Steal collateral during `end` process, by earning DSR interest after `flow`.
Summary: The end contract in MCD controls the process of shutting down the MCD contracts and allowing for users to redeem their DAI for collateral -- presumably to migrate to a new implementation of DAI. The process, however, doesn't prevent the continued functioniong of DAI savings accounts pot...
DEBIAN-CVE-2019-9518
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSHPROMISE. The peer spends ti...
ALPINE-CVE-2019-9518
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSHPROMISE. The peer spends ti...
CVE-2019-9518 Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSHPROMISE. The peer spends ti...
August 13, 2019—KB4512501 (OS Build 17134.950)
None None...