8934 matches found
CVE-2017-18502
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues...
Cross site scripting
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues...
CVE-2017-18502
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues...
CVE-2017-18502
CVE-2017-18502 affects the WordPress subscriber plugin prior to version 1.3.5. The issue is multiple XSS vulnerabilities in the subscriber plugin, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers (potential cookie/credentials risk) as described in connected ...
CVE-2019-6639
On BIG-IP AFM, PEM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting XSS issue. This is a control plane issue only and is not...
PT-2019-18221 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP AFM, PEM versions 11.5.1 through 11.5.8 BIG-IP AFM, PEM versions 11.6.1 through 11.6.3.4 BIG-IP AFM, PEM versions 12.1.0 through 12.1.4 BIG-IP AFM, PEM versions 13.0.0 through 13.1.1.4 BIG-IP AFM, PEM versions 14.0.0 through 14.0.0.4...
Seo By Rank Math <= 1.0.27 - Authenticated Settings Reset
Allows any authenticated user with a role as low as subscriber to reset Settings of the plugin. PoC https://plugins.trac.wordpress.org/browser/seo-by-rank-math/tags/1.0.27/includes/admin/class-options.phpL91...
Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services
Security researchers have discovered multiple critical vulnerabilities in a popular IPTV middleware platform that is currently being used by more than a thousand regional and international online media streaming services to manage their millions of subscribers. Discovered by security researchers ...
CVE-2019-5307
Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 and P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on th...
Slick Popup <= 1.7.1 - Privilege Escalation
Subscriber users are able to create an administrator account with hardcoded login credentials. PoC Hardcoded username "slickpopupteam" and its password is OmakPass13...
UBUNTU-CVE-2018-12546
In Eclipse Mosquitto version 1.0 to 1.5.5 inclusive when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients...
Loco Translate < 2.2.2 - Authenticated LFI
WordPress plugin Loco Translate version appears to have an Authenticated LFI Vulnerability under the 'Edit Template' Functionality. The following vulnerability can be exploited by any user with access to the plugin access can range from Admin to Subscriber WPScanTeam Note: Was not able to reprodu...
The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile allows a perpetrator to gain access to protected data.
The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected...
Juniper Junos MX Malformed Packet - DOS (JSA10900)
Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...
CVE-2019-0001
Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...
CVE-2019-0001 Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).
Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...
Code injection
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...
CVE-2018-20155
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...