8078 matches found
CVE-2019-15816: Improper Neutralization of Input During Web Page Generation
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...
GGPowerShell / Windows PowerShell Remote Command Execution
from base64 import b64encode from base64 import b64decode from socket import import argparse,sys,socket,struct,re GGPowerShell Microsoft Windows PowerShell - Unsantized Filename RCE Dirty File Creat0r. Original advisory:...
CVE-2019-15769
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via addoption and updateoption...
CVE-2019-15538
A flaw was found in the XFS file system in the Linux kernel. An acquired ILOCK was not freed/unlock when the call to xfsqmvopchownreserve fails and the lock is still held and can lead to denial to access for that device. This is primarily a local denial of service but could result in a remote...
WordPress stops-core-theme-and-plugin-updates plugin has unspecified vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. stops-core-theme-and-plugin-updates is an update management plugin that is used to manage updates to WordPress and its related plugins...
PT-2019-14378
Name of the Vulnerable Software and Affected Versions handl-utm-grabber plugin versions prior to 2.6.5 Description The issue concerns a CSRF problem via add option and update option. Recommendations For versions prior to 2.6.5, update to version 2.6.5 or later to resolve the issue...
PT-2019-18106
Name of the Vulnerable Software and Affected Versions Kea DHCPv4 server versions 1.4.0 through 1.5.0 Kea DHCPv4 server versions 1.6.0-beta1 Kea DHCPv4 server versions 1.6.0-beta2 Description The issue is caused by an invalid hostname option that triggers an assertion failure in the Kea DHCPv4...
CVE-2019-6473
An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...
PT-2019-11403
Name of the Vulnerable Software and Affected Versions: Suricata version 4.1.3 Description: An issue was discovered where the parser attempts to access a part of a DHCP packet when the network packet does not have the correct length, leading to a panic in the parse clientid option function in the...
WordPress option-tree plugin injection vulnerability (CNVD-2019-30765)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. WordPress option-tree suffers from a plugin injection...
WordPress option-tree plugin injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. There is an injection vulnerability in the WordPress option-tre...
WordPress option-tree plugin injection vulnerability (CNVD-2019-30767)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. WordPress option-tree plugin has an injection vulnerability. No...
CVE-2019-15702
In the TCP implementation gnrctcp in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because sys/net/gnrc/transportlayer/tcp/gnrctcpoption.c has an infinite loop for an unknown zero-length option...
CVE-2016-10936
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2019-15650
The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes such as disabling unattended theme updates because of a nonce check error...
CVE-2016-10936
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
Design/Logic Flaw
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2019-15650
The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes such as disabling unattended theme updates because of a nonce check error...
