1588 matches found
CVE-2016-10935: Undefined Security Weakness
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
PT-2019-7728
Name of the Vulnerable Software and Affected Versions WooCommerce Exporter plugin versions prior to 1.8.4 Description The issue allows for privilege escalation. Recommendations For versions prior to 1.8.4, update to version 1.8.4 or later to resolve the issue...
PT-2019-13982
Name of the Vulnerable Software and Affected Versions webtoffee WordPress Users & WooCommerce Customers Import Export plugin version 1.3.0 Description The issue allows CSV injection in the user url, display name, first name, and last name columns in an exported CSV file created by the WF...
WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...
CVE-2018-20968
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
CVE-2018-20968
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
CVE-2018-20968
The CVE-2018-20968 issue affects the WordPress wp-ultimate-exporter plugin prior to version 1.4.2. It is a CSRF vulnerability where requests from an untrusted origin can be forged because the plugin does not adequately verify that requests come from trusted users. Impact details in public sources...
PT-2019-10404
Name of the Vulnerable Software and Affected Versions wp-ultimate-exporter plugin versions prior to 1.4.2 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...
CVE-2018-20968: Cross-Site Request Forgery (CSRF)
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
DFIRTrack - The Incident Response Tracking Application
DFIRTrack Digital Forensics and Incident Response Tracking application is an open source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their...
Synology DiskStation Manager Improper Escape Neutralization Vulnerability
Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. An improper escape neutralization vulnerability exists in Log Exporter in Synology DSM versions prio...
CVE-2018-8920
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
CVE-2018-8920
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
CVE-2018-8920
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
Input validation
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
CVE-2018-8920
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
CVE-2018-8920
CVE-2018-8920 affects Synology DiskStation Manager (DSM) prior to 6.1.6-15266, via the Log Exporter. The root cause is improper neutralization of escape characters when exporting an archive in CSV format, enabling remote attackers to inject arbitrary content with an unspecified impact. The vulner...
PT-2018-18718 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.6-15266 Description: The issue is related to improper neutralization of escape in the Log Exporter component, allowing remote attackers to inject arbitrary content when exporting an archi...
CVE-2018-8920: Improper Encoding or Escaping of Output
Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...
The Incident Response Tracking Application: DFIRTrack
DFIRTrack Digital Forensics and Incident Response Tracking application is an open source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their...