CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

Cross site scripting

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-15837

The CVE-2019-15837 entry concerns the WordPress WebP Express Plugin before 0.14.8, which has a stored XSS vulnerability. Affected component: the WebP Express plugin for WordPress (versions prior to 0.14.8). Root cause: stored cross-site scripting enabling execution of client-side code in the cont...

PT-2019-14426

Name of the Vulnerable Software and Affected Versions webp-express plugin versions prior to 0.14.8 Description The issue is related to stored XSS in the webp-express plugin for WordPress. Recommendations For versions prior to 0.14.8, update to version 0.14.8 or later to resolve the issue...

The vulnerability affects the web interface for controlling the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to gain access to target systems with administrator privileges.

The vulnerability of the Cisco Integrated Management Controller IMC Supervisor web interface, as well as the tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to authentication procedures that have...

CVE-2019-15837: Improper Neutralization of Input During Web Page Generation

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

Cisco UCS Director and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

Cisco UCS Director and Cisco UCS Director Express for Big Data are both products from Cisco, Inc. Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS. Cisco UCS Director is a heterogeneous platform for private cloud infrastructure-as-a-service IaaS. A...

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerabilities

Cisco Integrated Management Controller IMC is a set of software from Cisco USA for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. An authentication bypass...

Cisco Integrated Management Controller Supervisor, Cisco UCS Director and Cisco UCS Director Express for Big Data Privilege Permission and Access Control Issues Vulnerabilities

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A privileg...

WordPress webp-express plugin information disclosure vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. An information disclosure vulnerability exists in the...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

Design/Logic Flaw

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The CVE concerns the WordPress plugin WebP Express (before version 0.14.11). It has insufficient protection against arbitrary file reading, enabling potential information disclosure. Affected component: webp-express plugin for WordPress; vulnerability arises from inadequate access controls around...

Cisco Unified Contact Center Express Input Validation Error Vulnerability

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. An input validation error vulnerability...

PT-2019-14059

Name of the Vulnerable Software and Affected Versions webp-express plugin versions prior to 0.14.11 Description The issue is related to insufficient protection against arbitrary file reading in the webp-express plugin for WordPress. Recommendations For versions prior to 0.14.11, update to version...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco Integrated Management Controller IMC Supervisor, Unified Computing System UCS Director, and UCS Director Express for Big Data. A remote attacker could exploit these vulnerabilities to take control of an affected system. The...