831 matches found
LibVNCServer DoS
The vulnerability of the libvncserver/translate.c component within the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...
DEBIAN-CVE-2020-14400
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary...
UBUNTU-CVE-2020-14400
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary...
DEBIAN-CVE-2019-12921
In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...
CVE-2020-10455
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/translate.php by adding a question mark ? followed by the payload...
CVE-2019-17660
A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...
PT-2019-15241
Name of the Vulnerable Software and Affected Versions LimeSurvey versions 3.19.1 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the tolang parameter in the "admin/translate/translateheader view.php" file. This can be...
CVE-2019-17660: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...
WordPress my-wp-translate plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-wp-translate is a language translation plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...
WordPress my-wp-translate plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-wp-translate is a language translation plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18569
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...
CVE-2017-18568
The my-wp-translate plugin before 1.0.4 for WordPress has XSS...
CVE-2017-18568
The my-wp-translate plugin before 1.0.4 for WordPress has XSS...
Cross site request forgery (csrf)
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...
Cross site scripting
The my-wp-translate plugin before 1.0.4 for WordPress has XSS...
CVE-2017-18568
The my-wp-translate plugin before 1.0.4 for WordPress has XSS...
CVE-2017-18568
The my-wp-translate plugin before 1.0.4 for WordPress has XSS...
CVE-2017-18568
CVE-2017-18568 affects the WordPress plugin my-wp-translate (before version 1.0.4). The vulnerability is cross-site scripting (XSS) caused by lack of proper validation of client-side data in the plugin. Impact ranges from partial integrity impact to potential user-observed content manipulation; C...
CVE-2017-18569
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...
CVE-2017-18569
The CVE-2017-18569 entry concerns the WordPress plugin my-wp-translate (versions prior to 1.0.4). A CSRF vulnerability is present, arising from insufficient verification that requests originate from a trusted user. This could allow an attacker to perform unintended actions on behalf of an authent...