4284 matches found
CVE-2018-14613
An issue was discovered in the btrfs filesystem code in the Linux kernel. An invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image is due to a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c function. This could lead to a...
PT-2019-7420
Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to a SQL injection vulnerability via the item id parameter in the afp get new portfolio item page function. This allows for potential exploitation...
CVE-2007-6691
Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to 1 "hotlink protection" in the URL rewrite module, 2 a WebDAV view in the WebDAV module, 3 a comment view in the Comment module, 4 unspecified "item information disclosure attacks" in the Core modu...
CVE-2019-6774
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
FreeBSD : jenkins -- multiple vulnerabilities (9720bb39-f82a-402f-9fe4-e2c875bdda83)
Jenkins Security Advisory : DescriptionMedium SECURITY-1498 / CVE-2019-10401 Stored XSS vulnerability in expandable textbox form control Medium SECURITY-1525 / CVE-2019-10402 XSS vulnerability in combobox form control Medium SECURITY-1537 1 / CVE-2019-10403 Stored XSS vulnerability in SCM tag...
CVE-2019-10404
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executor...
CSRF vulnerability and missing permission check in project-inheritance
project-inheritance allows the creation of projects based on templates defined in the plugin configuration. A missing permission check in the HTTP endpoint triggering project creation allowed users with Overall/Read permission to create these projects. Additionally, the HTTP endpoint did not...
PT-2019-14613
Name of the Vulnerable Software and Affected Versions insert-php aka Woody ad snippets plugin versions prior to 2.2.8 Description The issue allows authenticated XSS via the winp item parameter. Recommendations For versions prior to 2.2.8, update to version 2.2.8 or later to resolve the issue. As ...
Limesurvey Menu Item Access Vulnerability
limesurvey is an open source online questionnaire program with many functions such as questionnaire design, modification, release, recovery and statistics. A menu item access vulnerability exists in Limesurvey versions prior to 3.17.14. An attacker can use this vulnerability to view, update, or...
CVE-2019-15820
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmisavesettings authentication...
CVE-2019-15820
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmisavesettings authentication...
PT-2019-14409
Name of the Vulnerable Software and Affected Versions login-or-logout-menu-item plugin versions prior to 1.2.0 Description The issue concerns a lack of authentication requirement for lolmi save settings, potentially allowing unauthorized access. Recommendations For versions prior to 1.2.0, update...
CVE-2019-15820: URL Redirection to Untrusted Site
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmisavesettings authentication...
CVE-2019-15779
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...
PT-2019-14388
Name of the Vulnerable Software and Affected Versions insta-gallery plugin versions prior to 2.4.8 Description The issue concerns the lack of nonce validation for certain actions. Specifically, it affects the qligg dismiss notice and qligg form item delete actions, which can be exploited due to t...
CVE-2019-10051
An issue was discovered in Suricata 4.1.3. If the function filetrackernewchunk encounters an unsafe "Somesfcm = ft.newchunk " item, then the program enters an smb/files.rs error condition and crashes...
CVE-2019-15480
Domoticz 4.10717 has XSS via item.Name...
CVE-2016-10895
The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...
PT-2019-7691
Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.6.0 Description The issue allows for XSS via an add list item or add social links AJAX request. Recommendations For option-tree plugin versions prior to 2.6.0, update to version 2.6.0 or later to resolve...