CVE-2017-18521

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18521

The CVE-2017-18521 entry concerns the WordPress Democracy Poll plugin prior to version 5.4. Multiple connected sources confirm a CSRF flaw in the admin path wp-admin/options-general.php?page=democracy-poll&subpage=l10n, potentially allowing unauthorized actions when a user is convinced to perform...

PT-2019-8455

Name of the Vulnerable Software and Affected Versions democracy-poll plugin versions prior to 5.4 Description The issue concerns a CSRF problem. It can be exploited via the "wp-admin/options-general.php?page=democracy-poll&subpage=l10n" API endpoint. Recommendations For versions prior to 5.4,...

CVE-2017-18521: Cross-Site Request Forgery (CSRF)

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

Code injection

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The vulnerability is in the WordPress Democracy Poll plugin (before version 5.4). The issue is an XSS in update_l10n handled by admin/class.DemAdminInit.php. Affected component: the democracy-poll plugin for WordPress; root cause: improper sanitization/escaping in the update_l10n flow leading to ...

CVE-2017-18520: Improper Neutralization of Input During Web Page Generation

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

PT-2019-8454

Name of the Vulnerable Software and Affected Versions democracy-poll plugin versions prior to 5.4 Description The issue affects the democracy-poll plugin for WordPress, allowing for cross-site scripting XSS attacks. This is due to a flaw in the update l10n function within the...

PT-2019-7275

Name of the Vulnerable Software and Affected Versions wp-fastest-cache plugin versions prior to 0.8.4.9 Description The issue concerns SQL injection in the wp-fastest-cache plugin for WordPress. This occurs in the "wp-admin/admin-ajax.php" endpoint, specifically when the action parameter is set t...

OracleVM 3.3 / 3.4 : dbus (OVMSA-2019-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix netlink poll: error 4 Zhenzhong Duan - Apply patch for CVE-2019-12749 1725574 - Fix CVE-2019-12749 1725574 - Add dbus-run-session 1268972 C Tenable Network Security, Inc. The package checks in thi...

dbus security update

1:1.2.24-11.0.1 - fix netlink poll: error 4 Zhenzhong Duan 1:1.2.24-11 - Apply patch for CVE-2019-12749 1725574 1:1.2.24-10 - Fix CVE-2019-12749 1725574...

CVE-2019-2014

In rwt3thandlegetscpollrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...

Probably?

Remy Sharp asked a question on Twitter that got me thinking about probability for the first time in a while. The problem Get your copybooks out now! Remy is using an image service that has an API which returns a URL for one of its images, picked at random. Remy makes five requests to the service,...

Three-Fourths of Consumers Don't Trust Facebook, Threatpost Poll Finds

As Facebook privacy-related incidents continue to pile up, a new Threatpost poll found that a whopping three-fourths of respondents no longer trust the social-media giant. The negative sentiment, reflected in a Thursday Threatpost poll of over 130 security professionals, comes as Facebook faces a...

openSUSE Security Update : ntp (openSUSE-2019-1158)

This update for ntp fixes the following issues : Security issue fixed: - CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed : - Fixed an issue which caused openSSL mismatch bsc1125401 - Fix...

SUSE-SU-2019:0789-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed: - Fixed an issue which caused openSSL mismatch bsc1125401 - Fixed...