EUVD-2024-55713

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-39024

Summary: CVE-2024-39024 affects PacketFence 13.2.0 where the WebGui interface setting enables authenticated remote code execution . The connected sources corroborate the issue and indicate there is a published PoC (sighting shows a published-proof-of-concept ). Other details such as specific vuln...

EUVD-2017-5653

Malware in sbrugna...

CVE-2022-27231

Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product...

JVN#15241647: WordPress plugin "WP Statistics" vulnerable to cross-site scripting

WordPress plugin "WP Statistics" provided by VeronaLabs contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the web site using the product. Solution Update the plugin Update the plugin according to th...

CVE-2017-3518

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: Discovery Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access v...