9578 matches found
Adobe Reader Nested Events Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Linux Kernel KVM 'kvm_apic_has_events()' Denial of Service Vulnerability
The Linux kernel is the kernel used by the open source operating system Linux. Linux Kernel KVM has a denial of service vulnerability in the implementation of the 'kvmapichasevents' function. Allowing a remote attacker to exploit this vulnerability could crash the system...
UBUNTU-CVE-2015-4692
The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...
wpa_supplicant security and enhancement update
1:2.0-17 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1222015 1:2.0-16 - P2P: Validate SSID element length before copying it CVE-2015-1863 1:2.0-15 - Add domainmatch config option from upstream rh 1178263 - Include peer certificate in EAP events for use by clients...
Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)
The Events Manager WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability...
Events Manager < 5.5.7 - Multiple Cross-Site Scripting (XSS)
The Events Manager WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
WordPress Events Manager Plugin <= 5.5.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Events Calendar Plugin <= 6.7.11a - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Events Manager Plugin <= 5.3.5 - Multiple Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Events Manager Plugin <= 5.3.8 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Plugin Community Events 'community-events.php' SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Community Events is one of the plug-ins that creates events and accepts bookings from attendees. A SQL injection...
WordPress Community Events Plugin 1.3.5 - SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base...
WordPress Community Events Plugin 1.3.5 - SQL Injection
This WordPress Community Events plugin is prone to an SQL injection. If there is at least one planned event on the calendar, this vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade t...
WordPress Plugin Community Events 1.3.5 - SQL Injection
WordPress Plugin Community Events 1.3.5 - SQL Injection ======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Ba...
WordPress Plugin Community Events 1.3.5 - SQL Injection
======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base Score 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P homepage:...
Google Chrome suffers from an unspecified vulnerability (CNVD-2015-02615)
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions of Google Chrome prior to 42.0.2311.90, which stems from the program failing to properly handle interactions between page navigation and touch and gesture events. A remote attacker can exploit th...
WordPress Community Events 1.3.5 SQL Injection
======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base Score 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P homepage:...
Code injection
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack...
CVE-2015-1241
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack...
