7701 matches found
WordPress pie-register plugin SQL injection vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. pie-register is a plugin for user registration and login form customization. A SQL injection vulnerability exists in WordPress...
CVE-2019-15659
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...
CVE-2019-15659
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...
Sql injection
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...
CVE-2019-15659
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...
CVE-2019-15659
CVE-2019-15659 concerns the WordPress Pie Register plugin. The vulnerability is a SQL injection in the Pie Register plugin prior to 3.1.2 that could allow an attacker to perform arbitrary SQL commands via the affected functionality (invitation codes grid). Public references in the connected docum...
PT-2019-14327
Name of the Vulnerable Software and Affected Versions pie-register plugin versions prior to 3.1.2 Description The issue is related to SQL injection. Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue...
WordPress Pie Register plugin <= 3.1.1 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability found in WordPress Pie Register plugin versions = 3.1.1. Solution Update the WordPress Pie Register plugin to the latest available version at least 3.1.2...
CVE-2019-15659: Improper Neutralization of Special Elements used in an SQL Command
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...
CVE-2019-15556
Pvanloon1983 socialnetwork before 2019-07-03 allows SQL injection in includes/formhandlers/registerhandler.php...
CVE-2019-15556
Pvanloon1983 socialnetwork before 2019-07-03 allows SQL injection in includes/formhandlers/registerhandler.php...
PT-2019-14272
Name of the Vulnerable Software and Affected Versions Pvanloon1983 social network versions before 2019-07-03 Description The issue allows SQL injection in the includes/form handlers/register handler.php file. Recommendations For versions before 2019-07-03, update to a version released on or after...
CVE-2018-20979
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...
PT-2019-10415
Name of the Vulnerable Software and Affected Versions contact-form-7 plugin versions prior to 5.0.4 Description The issue is related to privilege escalation due to capability type mishandling in the register post type function. Recommendations For versions prior to 5.0.4, update to version 5.0.4 ...
PT-2019-13166
Name of the Vulnerable Software and Affected Versions Xerox printers versions prior to the fixed version Description The issue is caused by an insecure handling of the register parameters in the Google Cloud Print implementation, allowing an unauthenticated attacker to execute arbitrary code on t...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or...
NCSA Webinar on Cybersecurity for Small Businesses
The National Cyber Security Alliance NCSA and INFOSEC are hosting a webinar to educate small businesses on how to protect against phishing, vishing, and smishing threats. The webinar will be held on Tuesday, August 13, 2019 from 2-3 p.m. ET. The Cybersecurity and Infrastructure Agency CISA...
Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register
Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualization nVMX feature enabled nested=1, is vulnerable to a crash due to disabled external interrupts. As L2 guest could access r/w hardware CR8 register of the hostL0. In a nested visualization setup, L2 guest user...
PT-2019-6600
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37 Description The issue is related to an out of bounds array access in the Linux kernel, specifically in the drivers/net/mlx4/port.c file. This occurs when searching for a free entry in either the mlx4...
WordPress Genetechsolutions Pie Register Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Genetechsolutions Pie Register is a website registration plugin used in it. A cross-site scripting vulnerability exists in WordPress...