516 matches found
Fedora 23 : drupal7-views (2016-ed5f606dde)
Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...
[SECURITY] Fedora 23 Update: kf5-ki18n-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon for localization...
[SECURITY] Fedora 24 Update: kf5-ki18n-5.24.0-1.fc24
KDE Frameworks 5 Tier 1 addon for localization...
idsrv.sendwordnow.ca Open Redirect vulnerability
Vulnerable URL: https://idsrv.sendwordnow.ca/localization?lang=zh-TW=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:26 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Ran...
Eye Localization - External URLs, Native code usage, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Eye Localization published at the 'play' market has multiple vulnerabilities...
Code injection
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
WordPress Plugin Codestyling Localization Has Multiple Input Validation Vulnerabilities
WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Codestyling Localization is one of the localization language development translation package plugin. A cross-site...
Codestyling Localization <= 1.99.30 - Multiple CSRF
Plugin is still affected and has been closed...
WordPress Code Styling Localization Plugin <= 1.99.17 - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Backend Localization Plugin <= 1.6.1 - Cross Site Scripting
This plugin is prone to options-general.php kau-boysbackendlocalizationlanguage parametercross site scripting vulnerability. Solution Update the plugin...
WordPress Backend Localization Plugin <= 1.6.1 - Cross Site Scripting
This plugin is prone to options-general.php kau-boysbackendlocalizationlanguage parameter and wp-login.php kau-boysbackendlocalizationlanguage parameter cross site scripting vulnerability. Solution Update the plugin...
CVE-2015-0845
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
Format string
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
CVE-2015-0845
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
CVE-2015-0845
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
CVE-2015-0845
The CVE-2015-0845 vulnerability affects Movable Type family (Pro, Open Source, Advanced) with a format-string injection in the localisation of templates, enabling unauthenticated remote code execution as the web server user. Publicly documented activity indicates exploitation via template localiz...
CVE-2015-0845: Improper Control of Generation of Code
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates...
CVE-2015-1142
LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service Finder crash via crafted localization data...
Code injection
LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service Finder crash via crafted localization data...
CVE-2015-1142
CVE-2015-1142 affects Apple OS X LaunchServices prior to 10.10.3, where crafted localization data can trigger a local denial-of-service (Finder crash). The NVD entry lists the impact as Denial of Service with partial availability impact, and the recommended remediation is to update to the latest ...