4656 matches found
CVE-2019-16276
It was discovered that net/http through net/textproto in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before the colon. This could be abused by an attacker to smuggle HTTP requests when a proxy or a firewall is placed behind a server implemented in Go or ...
Design/Logic Flaw
The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header...
CVE-2015-9430
The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header...
CVE-2015-9430
The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header...
CVE-2015-9430
CVE-2015-9430 affects the Crazy Bone WordPress plugin (before version 0.6.0). The issue is an XSS vulnerability via the User-Agent HTTP header. Multiple connected sources confirm the same root cause and affected component. The wpvulndb entry additionally aligns with stored XSS scenarios for earli...
Design/Logic Flaw
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
PT-2019-7389
Name of the Vulnerable Software and Affected Versions crazy-bone plugin versions prior to 0.6.0 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs via the User-Agent HTTP header. This allows for potential malicious script injection, affecting...
FreeBSD : jenkins -- multiple vulnerabilities (9720bb39-f82a-402f-9fe4-e2c875bdda83)
Jenkins Security Advisory : DescriptionMedium SECURITY-1498 / CVE-2019-10401 Stored XSS vulnerability in expandable textbox form control Medium SECURITY-1525 / CVE-2019-10402 XSS vulnerability in combobox form control Medium SECURITY-1537 1 / CVE-2019-10403 Stored XSS vulnerability in SCM tag...
CVE-2015-9416
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
PT-2019-7375
Name of the Vulnerable Software and Affected Versions sitepress-multilingual-cms WPML plugin versions 2.9.3 through 3.2.6 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the Accept-Language HTTP header. Recommendations For sitepress-multilingual-cms WPM...
jenkins -- multiple vulnerabilities
Jenkins Security Advisory: Description Medium SECURITY-1498 / CVE-2019-10401 Stored XSS vulnerability in expandable textbox form control Medium SECURITY-1525 / CVE-2019-10402 XSS vulnerability in combobox form control Medium SECURITY-1537 1 / CVE-2019-10403 Stored XSS vulnerability in SCM tag...
CVE-2019-14458
VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...
Design/Logic Flaw
VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...
CVE-2019-14458
CVE-2019-14458 affects VIVOTEK IP Camera devices with firmware before 0x20x. The vulnerability allows a denial-of-service triggered by a crafted HTTP header. Exploit details, affected models/versions beyond the firmware threshold, and concrete remediation are not provided in the connected documen...
PT-2019-13704
Name of the Vulnerable Software and Affected Versions VIVOTEK IP Camera devices with firmware prior to 0x20x Description The issue allows for a denial of service via a crafted HTTP header. Recommendations For VIVOTEK IP Camera devices with firmware prior to 0x20x, update the firmware to version...
CVE-2019-14458: Undefined Security Weakness
VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header...
CVE-2016-10990
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...
Design/Logic Flaw
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...