CVE-2015-5084

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors...

Research Artisan Lite Security Bypass Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A security vulnerability exists in Research Artisan Lite prior to version 1.18, which is caused by the program failing to properly perform authentication. A remot...

WordPress Unite Gallery Lite Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Unite Gallery is a graphics and video gallery plugin for WordPress. Unite Gallery Lite 1.4.6 and other versions suffer from ...

Research Artisan Lite Cross-Site Scripting Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A cross-site scripting vulnerability exists in Research Artisan Lite versions prior to 1.18. The vulnerability can be exploited by remote attackers to inject...

WordPress Unite Gallery Lite Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Unite Gallery is a graphics and video gallery plugin for WordPress. Unite Gallery Lite 1.4.6 and other versions suffer from ...

PT-2016-3722 · Sisco · Sisco Mms-Ease +2

Name of the Vulnerable Software and Affected Versions: SISCO MMS-EASE and AX-S4 ICCP products affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a crafted packet to the SNAP Lite component...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Unite Gallery Lite plugin version 1.4.6 suffers from cross site request forgery and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lit...

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL:...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

Unite Gallery Lite is prone to multiple vulnerabilities, such as CSRF and SQL injection. Solution Update the plugin...

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...

Authentication flaw

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

The CVE-2015-2975 issue affects Research Artisan Lite prior to version 1.18. The root cause is improper authentication (CWE-592), allowing an attacker to perform operations without logging in. The impact is that remote attackers could execute unspecified actions via unknown vectors. Exploitation ...

CVE-2015-2975: Undefined Security Weakness

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

PT-2015-6022

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to perform unspecified actions due to a lack of authentication verification. Recommendations For Research Artisan Lite versions prior to 1.18, update to...

WordPress Unite Gallery Lite 1.4.6 CSRF / SQL Injection

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...

CVE-2015-2976

Multiple cross-site scripting XSS vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted HTML document or 2 a crafted URL that is mishandled during access-log analysis...

CVE-2015-2976

CVE-2015-2976 affects Research Artisan Lite prior to 1.18. The provided documents confirm multiple cross-site scripting (XSS) vulnerabilities (CWE-79) that can allow remote attackers to inject arbitrary scripts via either a crafted HTML document or a crafted URL processed during access-log analys...

PT-2015-6023

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted HTML document or a crafted URL that is mishandled during access-log analysis. This can be achieved...