CVE-2015-9467

The CVE-2015-9467 vulnerability affects the WordPress Broken Link Manager plugin (before 0.5.0). The root cause is an SQL injection via the url parameter using the wpslDelURL or wpslEditURL vectors, enabling an attacker to execute arbitrary SQL commands. References (NVD/Red Hat/CNVD) corroborate ...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

PT-2019-7426

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin versions prior to 0.5.0 Description The issue concerns SQL injection via the url parameter in the wpslDelURL or wpslEditURL functions. This allows for potential SQL injection attacks. Recommendations For versions pri...

CVE-2015-9467: Improper Neutralization of Special Elements used in an SQL Command

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

PT-2019-7427

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin version 0.4.5 Description The issue concerns a cross-site scripting XSS flaw. It is triggered via the page parameter in a delURL action. Recommendations For version 0.4.5, consider disabling the delURL action until a...

CVE-2015-9468: Improper Neutralization of Input During Web Page Generation

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

The vulnerability of the /web/Public/Conn.php component of the software controller for centralized control of wireless networks in D-Link Central WiFi Manager CWM(100) allows a intruder to execute arbitrary code.

The vulnerability of the /web/Public/Conn.php component of the software controller for centralized control of D-Link Central WiFi Manager CWM100 relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute...

Design/Logic Flaw

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

CVE-2015-9453

The CVE concerns the WordPress Broken Link Manager plugin, affected versions before 0.6.0. Root cause: the plugin does not properly validate or sanitize input via HTTP Referer or User‑Agent headers when requests target a non-existent URL, enabling cross‑site scripting. Impact: attacker can inject...

CVE-2015-9453

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

PT-2019-7412

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin versions prior to 0.6.0 for WordPress Description The issue allows for XSS via the HTTP Referer or User-Agent header to a URL that does not exist. Recommendations For versions prior to 0.6.0, update to version 0.6.0 ...

CVE-2015-9453: Improper Neutralization of Input During Web Page Generation

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

CVE-2018-19860

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command...

CVE-2017-8985

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

CVE-2017-8985

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

CVE-2017-8985

CVE-2017-8985 concerns HPE XP Storage using Hitachi Global Link Manager (HGLM). The affected stack is HGLM versions 6.3.0-00 through 8.5.2-00. The vulnerability is described as a local authenticated information disclosure vulnerability, with access limited to the local attacker (no user interacti...

PT-2018-8480

Name of the Vulnerable Software and Affected Versions HPE XP Storage using Hitachi Global Link Manager HGLM versions 6.3.0-00 through 8.5.2-00 Description The issue is a local authenticated information disclosure. Recommendations For versions 6.3.0-00 through 8.5.2-00, update to a version that...

CVE-2017-8985: Exposure of Sensitive Information to an Unauthorized Actor

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

HPESBHF03819 rev.2 - HPE XP Storage using HGLM, Local Authentication Bypass

Potential Security Impact: Local: Authentication Restriction Bypass; Remote: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Hitachi Dynamic Link Manager HDLM Software HGLM 6.3.0-00 to 8.5.2-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

Broken Link Manager <= 0.4.5 - Unauthenticated SQL Injection & XSS

The Broken Link Manager WordPress plugin was affected by an Unauthenticated SQL Injection & XSS security vulnerability...