Lucene search
+L

201 matches found

Atlassian
Atlassian
•added 2018/02/07 10:18 p.m.•136 views

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

5.4CVSS1.5AI score0.00591EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2018/02/07 10:18 p.m.•55 views

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

5.4CVSS1.5AI score0.00591EPSS
SaveExploits0
Atlassian
Atlassian
•added 2018/02/07 10:17 p.m.•125 views

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

5.4CVSS1.5AI score0.00591EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2018/02/07 10:17 p.m.•40 views

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

5.4CVSS1.5AI score0.00591EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/03/22 4:49 p.m.•10 views

jenkins: Jenkins plugin manager vulnerable to MITM attacks (SECURITY-234)

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin...

7.6CVSS7.7AI score0.01397EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2016/01/26 7:12 p.m.•14 views

jenkins: Jenkins plugin manager vulnerable to MITM attacks (SECURITY-234)

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin...

7.6CVSS7.7AI score0.01397EPSS
SaveExploits0References5
Veeam
Veeam
•added 2015/06/17 12:00 a.m.•19 views

Uninstalling Veeam Backup & Replication plug-in for Labtech

Challenge Uninstalling the plug-in using Plugin Manager only removes it from the list of plugins but leaves Veeam components reports, monitors, etc. and database data intact. Cause Uninstalling the Veeam Backup & Replication Plug-in by means of the LabTech Plugin Manager is not supported. If you...

7.4AI score
SaveExploits0
Atlassian
Atlassian
•added 2015/06/04 10:06 p.m.•20 views

Remove old plugin manager

The old plugin manager is still available in confluence if you know the URL ../admin/viewplugins.action it looks quite terrible and given it is almost an unknown feature most of the current Confluence Team would not know to fix it if there are security problems with it. It was kept when we put UP...

0.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2015/06/04 10:06 p.m.•33 views

Remove old plugin manager

The old plugin manager is still available in confluence if you know the URL ../admin/viewplugins.action it looks quite terrible and given it is almost an unknown feature most of the current Confluence Team would not know to fix it if there are security problems with it. It was kept when we put UP...

0.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2015/06/04 10:06 p.m.•22 views

Remove old plugin manager

The old plugin manager is still available in confluence if you know the URL ../admin/viewplugins.action it looks quite terrible and given it is almost an unknown feature most of the current Confluence Team would not know to fix it if there are security problems with it. It was kept when we put UP...

0.5AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•20 views

WordPress Multisite Plugin Manager Plugin <= 3.1.1 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.3AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2014/08/01 10:58 a.m.•6 views

Multisite plugin Manager 3.1.1 - Two Cross-Site Scripting Vulnerabilities

The Multisite Plugin Manager WordPress plugin was affected by a Two Cross-Site Scripting Vulnerabilities security vulnerability...

2AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2014/07/02 6:55 p.m.•26 views

CVE-2014-4593

Cross-site scripting XSS vulnerability in wp-plugins-net/index.php in the WP Plugin Manager wppm plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

4.3CVSS5.8AI score0.01629EPSS
SaveExploits1References1
Prion
Prion
•added 2014/07/02 6:55 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in wp-plugins-net/index.php in the WP Plugin Manager wppm plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

4.3CVSS6.2AI score0.01629EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/07/02 6:00 p.m.•41 views

CVE-2014-4593

Cross-site scripting XSS vulnerability in wp-plugins-net/index.php in the WP Plugin Manager wppm plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

5.8AI score0.01629EPSS
SaveExploits1References1
CVE
CVE
•added 2014/07/02 6:00 p.m.•58 views

CVE-2014-4593

CVE-2014-4593 is a cross-site scripting (XSS) vulnerability in the WP Plugin Manager (WP Plugin Manager) plugin for WordPress, specifically in wp-plugins-net/index.php up to version 1.6.4.b. The flaw allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Connecte...

4.3CVSS6AI score0.01629EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2014/06/23 12:00 a.m.•24 views

WordPress WP Plugin Manager Plugin <= 1.6.4.b - XSS

Because of this vulnerability in wp-plugins-net/index.php, the attackers can inject arbitrary web script or HTML via the "filter" parameter. Solution Update the plugin...

4.3CVSS2.7AI score0.01629EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2014/06/23 12:00 a.m.•26 views

WordPress WP Plugin Manager Plugin <= 1.6.4.b - XSS

Because of this vulnerability in wp-plugins-net/index.php, the attackers can inject arbitrary web script or HTML via the "filter" parameter. Solution Update the plugin...

4.3CVSS2.7AI score0.01629EPSS
SaveExploits1References1Affected Software1
zdt
zdt
•added 2010/09/28 12:00 a.m.•34 views

Skype 4.2 (Plugin Manager-ezPMUtils.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits =========================================================== Skype 4.2 Plugin Manager-ezPMUtils.dll Remote BOF Exploit ===========================================================...

7.1AI score
SaveExploits0
Drupal
Drupal
•added 2008/09/24 12:00 a.m.•22 views

SA-2008-054 - Plugin Manager - Access bypass

The Plugin Manager module provides the methods and graphical interfaces needed to automatically install new modules and themes from the Drupal.org website. An oversight in the menu permissions code allows any user to uninstall and remove modules installed with the Plugin Manager. This risk is onl...

7.1AI score
SaveExploits0References4
Rows per page
Query Builder