11674 matches found
CVE-2022-25018
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages...
CVE-2022-25018
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages...
CVE-2022-25018
Removed by vendor...
CVE-2022-25018
Affected software: Pluxml v5.8.7. Vulnerability: remote code execution via crafted PHP code inserted into static pages. Root cause: improper handling/insertion of PHP in static content enables arbitrary code execution by an attacker. Impact: attacker could run arbitrary PHP on the server; CVSS co...
Ssr Pages Builder 路径遍历漏洞
Ssr Pages is an Html page builder for Ssr server-side rendering. a path traversal vulnerability exists in Ssr Pages, which stems from a path traversal issue that can occur when untrusted input is provided to the svg attribute as an argument to the buildMessagePageOptions function, which can be...
WordPress Photoswipe Masonry Gallery plugin跨站脚本漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Photoswipe Masonry Gallery plugin has a cross-site scripting vulnerability, which can be exploited by...
CVE-2022-26159
The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...
Code injection
The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...
WordPress Mobile Pages plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Mobile Pages plugin versions = 1.0.0. Solution Update the WordPress Mobile Pages plugin to the latest available version at least 1.0.1...
WordPress Mass Pages/Posts Creator plugin <= 2.1.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Mass Pages/Posts Creator plugin versions = 2.1.4. Solution Update the WordPress Mass Pages/Posts Creator plugin to the latest available version at least 2.1.5...
WordPress Widgets on Pages and Posts plugin <= 1.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Widgets on Pages and Posts plugin versions = 1.4.0. Solution No patched version available...
WordPress Mobile Pages plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mobile Pages plugin versions = 1.0.0. Solution Update the WordPress Mobile Pages plugin to the latest available version at least 1.0.1...
WordPress Widgets on Pages plugin <= 1.5.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Widgets on Pages plugin versions = 1.5.0. Solution Update the WordPress Widgets on Pages plugin to the latest available version at least 1.6.0...
WordPress Widgets on Pages plugin <= 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Widgets on Pages plugin versions = 1.5.0. Solution Update the WordPress Widgets on Pages plugin to the latest available version at least 1.6.0...
GSD-2022-1000385 mm: don't try to NUMA-migrate COW pages that have other uses
mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...
Remote Code Execution (RCE)
October CMS is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library does not properly sanitize the user input before rendering, allowing an attacker who has access to the backend to manipulate web pages via cms.safemode or cms.enableSafeMode to execute arbitrary...
[SECURITY] Fedora 34 Update: php-7.4.28-1.fc34
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Ec-cube 跨站请求伪造漏洞
Ec-cube is an open source e-commerce system from the Japanese company Ec-cube. The EC-CUBE plugin suffers from a cross-site request forgery vulnerability that exists due to insufficient authentication of the HTTP request source. A remote attacker could use this vulnerability to trick a victim int...
