Former Cross-Site Scripting Vulnerability

Former is a form builder for frameworks like Laravel. A cross-site scripting vulnerability exists in Former versions prior to 4.2.1, which can be exploited by an attacker to execute client-side code...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32464)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists ...

WordPress weblibrarian plugin cross-site scripting vulnerability (CNVD-2019-28884)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. weblibrarian is a library catalog management system used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress weblibrarian plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. weblibrarian is a library catalog management system used in it. A cross-site scripting vulnerability exists in the WordPress...

GitLab Input Validation Error Vulnerability (CNVD-2020-20440)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...

cPanel Input Validation Error Vulnerability (CNVD-2019-29015)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 55.9999.141. The vulnerability stems from a lack of...

CVE-2019-5634

An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. Communications to the internet API services and direct connections to the lock via Bluetooth Low Energy BLE from the mobile application are logged in...

CVE-2016-10923

The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation...

PT-2019-7292 · WordPress · Cforms2

Name of the Vulnerable Software and Affected Versions: cforms2 plugin versions prior to 14.6.10 Description: The issue is related to SQL injection. Recommendations: For versions prior to 14.6.10, update to version 14.6.10 or later to resolve the issue...

cPanel Authorization Issues Vulnerability (CNVD-2019-29008)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of...

Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability

Cisco Enterprise Network Functions Virtualization Infrastructure Software NFVIS is a set of Linux-based infrastructure software from Cisco. The software is mainly used for designing, deploying and managing network services and dynamically deploying virtualized network functions on supported Cisco...

cPanel path traversal vulnerability (CNVD-2019-29017)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit the vulnerability to execute...

WordPress rating-bws plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rating-bws is a user rating, scoring plugin used in it. A cross-site scripting vulnerability exists in versions of the WordPress...

PT-2019-7029 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.3.6.1 Description: The issue affects the events-manager plugin for WordPress, allowing XSS attacks via the booking form and admin areas. Recommendations: For versions prior to 5.3.6.1, update to versi...

Unspecified vulnerability in cPanel (CNVD-2019-29019)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability to perform...

PT-2019-7028 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.3.9 Description: The issue concerns a Cross-Site Scripting XSS flaw in the search form field of the events-manager plugin for WordPress. Recommendations: For versions prior to 5.3.9, update to version...

Unspecified vulnerability in cPanel (CNVD-2019-29021)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability by forging...

Cisco HyperFlex Software Static SSL Key Vulnerability

Cisco HyperFlex is Cisco's hyperconverged infrastructure HCI platform built to meet the needs of multi-cloud IT, supported by a simple hyperconverged infrastructure. A static SSL key vulnerability exists in Cisco HyperFlex Software versions prior to 4.01a. The vulnerability stems from inadequate...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28408)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the docid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of a us...

Linux kernel resource management error vulnerability (CNVD-2019-32363)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the drivers/net/wireless/intersil/p54/p54usb.c file in versions of Linux kernel prior to 5.2.1. The vulnerability...