1193 matches found
CVE-2020-16248
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...
PT-2020-14841 · Prometheus +2 · Prometheus Blackbox Exporter +2
Name of the Vulnerable Software and Affected Versions: Prometheus Blackbox Exporter versions through 0.17.0 Description: The issue allows for a Server-Side Request Forgery SSRF via the /probe endpoint with the target parameter. There is a discussion suggesting this could be seen as both intended...
WordPress Widget Settings Importer/Exporter plugin <= 1.5.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress Widget Settings Importer/Exporter plugin versions = 1.5.3. Solution This plugin has been closed as of April 13, 2020 and is not available for download. Reason: Security Issue...
Debian DSA-4624-1 : evince - security update
Several vulnerabilities were discovered in evince, a simple multi-page document viewer. - CVE-2017-1000159 Tobias Mueller reported that the DVI exporter in evince is susceptible to a command injection vulnerability via specially crafted filenames. - CVE-2019-11459 Andy Nguyen reported that the...
WordPress WooCommerce - Store Exporter plugin <= 2.3.1 - CSV Injection vulnerability
CSV Injection vulnerability found by Vishnupriya Ilango FortiGuard Labs in WordPress WooCommerce - Store Exporter plugin versions = 2.3.1. Solution Update the WordPress WooCommerce - Store Exporter plugin to the latest available version at least 2.4...
WooCommerce - Store Exporter < 2.4 - CSV Injection
A CSV Injection vulnerability was discovered in WooCommerce - Store Exporter v 2.3.1. It allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible command/code execution...
DEBIAN-CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
Security update for haproxy (moderate)
openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2555-1 Rating: moderate References: 1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for haproxy ...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
Sql injection
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000
CVE-2016-11000 affects the WordPress plugin wp-ultimate-exporter (versions up to 1.1). The vulnerability is an SQL injection in the export_type_name parameter, with CVSS vectors indicating high/moderate impact (CVSS v3.1: CRITICAL, 9.8; CVSS v2.0: HIGH, 7.5). The reports confirm the vulnerable co...
WordPress woocommerce-exporter plugin elevation of privilege vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. woocommerce-exporter is used in one of the e-commerce website product, transaction information export plugin. A security...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
Privilege escalation
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935
CVE-2016-10935 affects the WordPress plugin “woocommerce-exporter” prior to version 1.8.4, with a described vulnerability of privilege escalation. The provided documents consistently identify the affected component as the WooCommerce – Store Exporter WordPress plugin and confirm the issue as priv...
WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...