beiphone.it XSS vulnerability

Open Bug Bounty ID: OBB-566489 Description| Value ---|--- Affected Website:| beiphone.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-17277

Name of the Vulnerable Software and Affected Versions: Joomla! Form Maker version 3.6.12 Description: A SQL Injection issue exists in the Form Maker component for Joomla!, which can be exploited via the id, from, or to parameter in a "view=stats" request. Recommendations: For version 3.6.12, avoi...

CVE-2018-5991: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

PT-2018-3973

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30 Description The issue is related to the bfd section from shdr function in the elf.c component of the Binary File Descriptor BFD library. It allows remote attackers to cause a denial of service, resulting in a...

Debian: Security Advisory (DLA-1052-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Subsonic v6.1.3 has an insecure allow-access-from domain="" Flash cross-domain policy that allows an attacker to retrieve sensitive user information via a read request. To exploit this issue, an attacker must convince the user to visit a web site loaded with a SWF file created specifically to ste...

crystals-from-swarovski.com XSS vulnerability

Open Bug Bounty ID: OBB-531374 Description| Value ---|--- Affected Website:| crystals-from-swarovski.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2018-5711

gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or...

WordPress Media From FTP Plugin < 9.85 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112188";...

WordPress Media from FTP Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Media from FTP plugin is used in one of the media file upload plugin. A directory traversal vulnerability exists i...

Stalker CommuniGate Pro Label Validation Vulnerability

Stalker CommuniGate Pro CGP is a comprehensive mail transfer agent MTA developed by Stalker Software, Inc. that supports multiple platforms. A security vulnerability in the implementation of the 'XML Interface to Messaging, Scheduling, and Signaling' XIMSS protocol in Stalker CGP version 6.2 stem...

Buffer overflow

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...

PT-2018-6596

Name of the Vulnerable Software and Affected Versions: Handy Password version 4.9.3 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a long Title name field in mail box data that is mishandled in an Open from mail box action. Recommendations: For Handy...

CVE-2018-5310

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound. In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function base/PdfObjectStreamParserObject.cpp. Remote attackers could leverage this vulnerability to...

Directory traversal

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI...

CVE-2018-5310

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI...

CVE-2018-5310

The CVE 2018-5310 entry corresponds to a Directory Traversal vulnerability in the WordPress Media from FTP plugin, exploitable via the searchdir parameter in the wp-admin/admin.php?page=mediafromftp-search-register URI. Affected versions are prior to 9.85. Remediation: update the plugin to versio...

CVE-2018-5310

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI...

PT-2018-16887

Name of the Vulnerable Software and Affected Versions Media from FTP plugin versions prior to 9.85 Description The issue exists in the Media from FTP plugin, where Directory Traversal is possible. This can be achieved via the searchdir parameter to the...