170 matches found
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000244
CVE-2017-1000244 affects the Jenkins Favorite Plugin (versions
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
CVE-2017-1000243
Jenkins Favorite Plugin (up to 2.1.x) contains a permissions check flaw that allows any user to modify another user’s favorites. This is described across multiple sources as a lack of privilege validation when changing favorite status, enabling unauthorized changes via the affected plugin. The vu...
CVE-2017-10271 - Oracle WebLogic Server AsyncResponseService Deserialization Vulnerability
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
jojo.wikia.com XSS vulnerability
Vulnerable URL: http://jojo.wikia.com/wiki/Top10list:FavoriteCharacter?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.05.2016 Latest check for patch:| 05.05.2016 04:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
FBReader: Favorite Book Reader - Corrupted files, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application FBReader: Favorite Book Reader published at the 'play' market has multiple vulnerabilities...
CVE-2016-1160
Cross-site scripting XSS vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1160
Cross-site scripting XSS vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1160
Cross-site scripting XSS vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1160
CVE-2016-1160 concerns the WordPress plugin WP Favorite Posts (versions before 1.6.6). The vulnerability is a Cross-Site Scripting (XSS) issue that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected software is the WP Favorite Posts plugin for WordPress; the...
WordPress WP Favorite Posts Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WP Favorite Posts is one of the post collection plugin. A cross-site scripting vulnerability exists in WordPress WP...
WordPress plugin "WP Favorite Posts" vulnerable to cross-site scripting
Overview "WP Favorite Posts" is a plugin for WordPress. WP Favorite Posts contains a cross-site scripting vulnerability. Note that this vulnerability cannot be exploited on the default settings. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC...
JVN#86517621: WordPress plugin "WP Favorite Posts" vulnerable to cross-site scripting
"WP Favorite Posts" is a plugin for WordPress. WP Favorite Posts contains a cross-site scripting vulnerability. Note that this vulnerability cannot be exploited on the default settings. Impact An arbitrary script may be executed on the user's web browser. Solution Update the plugin Update to the...
Debian DSA-3507-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-8126 Joerg Bornemann discovered multiple buffer overflow issues in the libpng library. - CVE-2016-1630 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in Blink/Webkit. - CVE-2016-1631 Mariusz...
Debian Security Advisory DSA 3507-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-8126 Joerg Bornemann discovered multiple buffer overflow issues in the libpng library. CVE-2016-1630 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in Blink/Webkit. CVE-2016-1631 Mariusz Mlynski...
