3798 matches found
CVE-2019-11548
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint...
CVE-2019-11548: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint...
PT-2019-12371
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.8.9 Description The issue is related to Incorrect Access Control, allowing unprivileged members of a project to post comments on confidential issues. This is due to an authorization...
CVE-2017-18563
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...
CVE-2017-18563
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...
PT-2019-8497
Name of the Vulnerable Software and Affected Versions WordPress rsvp plugin versions prior to 2.3.8 Description The issue allows for persistent XSS via the note field on the attendee-list screen. Recommendations For versions prior to 2.3.8, update to version 2.3.8 or later to resolve the issue...
CVE-2017-18563: Improper Neutralization of Input During Web Page Generation
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...
WordPress note-press plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. note-press is a WordPress admin panel annotation plugin used in it. A SQL injection vulnerability exists in the WordPress note-pre...
php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE()
exifprocessIFDinMAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG file...
php: Uninitialized read in exif_process_IFD_in_MAKERNOTE
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the makernote-offset relationship to valuelen...
php: Uninitialized read in exif_process_IFD_in_MAKERNOTE
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the datalen variable...
php: Out-of-bounds read in ext/exif/exif.c:exif_read_data() when reading crafted JPEG data
An out-of-bounds read has been found in PHP when function exifiifaddvalue handles the case of a MakerNote that lacks a final terminator character. A remote attacker could use this vulnerability to cause a crash...
CVE-2017-18548
The note-press plugin before 0.1.2 for WordPress has SQL injection...
CVE-2017-18548
The CVE-2017-18548 entry concerns the WordPress plugin note-press (before version 0.1.2 ). The vulnerability is a SQL injection in the plugin, as described in multiple sources (NVD entry and Red Hat/CVE references). Affected component: the plugin’s SQL handling in Note Press for WordPress. Impact...
CVE-2017-18548: Improper Neutralization of Special Elements used in an SQL Command
The note-press plugin before 0.1.2 for WordPress has SQL injection...
PT-2019-8482
Name of the Vulnerable Software and Affected Versions note-press plugin versions prior to 0.1.2 Description The issue is related to SQL injection in the note-press plugin for WordPress. Recommendations For versions prior to 0.1.2, update to version 0.1.2 or later to resolve the issue...
CB TAU Threat Intelligence Notification – MegaCortex Ransomware
MegaCortex is a unique form of ransomware that was initially discovered earlier this year. It proved to be a very complex form of malware that required additional steps of operation that were only recoverable during incident responses. Since then, MegaCortex has been updated to become more generi...
CVE-2019-14361
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed t...
