4086 matches found
Information disclosure
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9379
The CVE-2015-9379 entry concerns WordPress plugin WordPress iThemes Builder Style Manager. Affected component: the Style Manager widget/plugin (iThemes Builder Style Manager) for WordPress, with vulnerable versions before 0.7.7. Root cause: cross-site scripting (XSS) vulnerability via the add_que...
PT-2019-7338
Name of the Vulnerable Software and Affected Versions iThemes Builder Style Manager versions prior to 0.7.7 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 0.7.7, update to version 0.7.7 o...
CVE-2015-9379: Improper Neutralization of Input During Web Page Generation
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...
EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1801)
According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrar...
DejaBlue: New BlueKeep-Style Bugs Mean You Need to Update Windows Now
Vulnerabilities in Microsoft's Remote Desktop Protocol continue to plague the web...
NewStart CGSL CORE 5.04 / MAIN 5.04 : gnutls Multiple Vulnerabilities (NS-SA-2019-0068)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gnutls packages installed that are affected by multiple vulnerabilities: - It was found that GnuTLS's implementation of HMAC- SHA-256 was vulnerable to Lucky Thirteen-style attack. A remote attacker could use this flaw to...
Sql injection
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...
CVE-2017-18387
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...
CVE-2017-18387
Affected software: cPanel prior to 68.0.15. The vulnerability is an arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). Root cause: Maketext injection allows code execution, enabling an attacker to run arbitrary code with high integrity/availability impact. Explo...
PT-2019-8322
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows for arbitrary code execution through Maketext injection in a Reseller style upload. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the...
CVE-2017-18387: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...
Design/Logic Flaw
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20877
CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...
PT-2019-10305
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows self XSS in the WHM Style Upload interface. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...
PT-2019-10357
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for arbitrary file-read and file-unlink operations through WHM style uploads. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the iss...