WordPress plugin Quizlord cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Quizlord plugin is used in one of the plugin in the site to add testing capabilities. A cross-site scripting...

Apache mod_perl Code Execution Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server. modperl is an embedded Perl compiler Apache HTTP Server . A security vulnerability exists in Apache modperl versions 2.0 through 2.0.10. The vulnerability can be exploited to execute arbitrary...

Arbitrary File Deletion Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file deletion vulnerability exists in the export template in the LibreHealthIO LH-EHR REL-2.0.0 release. An attacker can exploit this vulnerability to cause a denial of servic...

PHP Scripts Mall Chartered Accountant:Auditor Website Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Chartered Accountant:Auditor Website is a financial auditing website system script by PHP Scripts Mall India. The system includes features such as profile management, feedback management, order management and document upload management. A cross-site request forgery vulnerability...

PHP Scripts Mall hotel-booking-script Denial of Service Vulnerability

PHP Scripts Mall hotel-booking-script is a hotel booking system script by PHP Scripts Mall India, which includes features like advanced CMS management, review management and booking management. A denial of service vulnerability exists in PHP Scripts Mall hotel-booking-script version 2.0.4, which...

Stored Cross-Site Scripting Vulnerability in Shelve Project Plugin

Shelve Project Plugin did not escape the names of shelved projects on the UI, potentially resulting in a stored XSS vulnerability. Shelve Project Plugin 2.0 and newer now escapes the names of shelved projects shown on the UI...

PT-2018-12308 · Aurorasparc Llc · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: A double free issue exists in the MP4StringProperty class, located in mp4property.cpp. This occurs when a dangling pointer is freed again in the destructor after an exception is triggered. Recommendations: For...

SUSE-SU-2018:1850-1 Security update for python-paramiko

This update for python-paramiko to version 2.0.8 fixes the following issues: - CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did not properly check whether authentication is completed processing other requests. A customized SSH client could have skipped the authenticati...

YIBAN Easy class education platform cross-site scripting vulnerability

YIBAN Easy class education platform is a one-stop management solution for school resources from YIBAN. A cross-site scripting vulnerability exists in YIBAN Easy class education platform version 2.0. The vulnerability can be exploited by remote attackers to steal user cookies by sending the 'k'...

CVE-2018-0280

A vulnerability in the Real-Time Transport Protocol RTP bitstream processing of the Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input validation of incoming RTP bitstreams. An attacker...

CVE-2018-8865

In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

Lantech IDS 2102 Input Validation Vulnerability

The Lantech IDS 2102 is an Ethernet device server. An input validation vulnerability exists in the Lantech IDS 2102 version 2.0 and earlier. A remote attacker could exploit this vulnerability by constructing malicious input to execute arbitrary code...

Microsoft ASP.NET Core Remote Elevation of Privilege Vulnerability

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A privilege vulnerability exists in Microsoft ASP.NET Core version 2.0, which...

CCN-lite Denial of Service Vulnerability (CNVD-2018-05497)

CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the ccnl-ext-mgmt.c file in CCN-lite versions prior to 2.00. No information about this vulnerability is available at this time, so please stay tuned to CNN...

CCN-lite Memory Disclosure Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A memory leak vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can cause a denial of service memory consumption by exploiting a failure to allocate memory for comp or...

CCN-lite Out-of-Bounds Access Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An out-of-bounds access vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause out-of-bounds access via a route related to sslhalen...

Microsoft ASP.NET Core Elevation of Privilege Vulnerability (CNVD-2018-00899)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. An elevation of privilege vulnerability exists in Microsoft ASP.NET Core versio...

CVE-2017-15892

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...

CVE-2017-1342

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the...