4609 matches found
CVE-2019-15839
The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion...
WordPress cp-polls plugin cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress cp-polls plugin versions prior to 1.0.1. The vulnerability stems...
WordPress wp-rollback plugin cross-site request forgery vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-rollback is a version rollback plugin used in it, which is mainly used for version rollback of WordPress and its plugins....
WordPress groundhogg plugin security vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress groundhogg plugin versions prior to 1.3.5. An attacker can exploit the...
Alfresco Software Alfresco application for Android SQL Injection Vulnerability
Alfresco Software Alfresco application for Android is an application for accessing Alfresco on the Android platform from Alfresco Software, USA. An SQL injection vulnerability exists in the HistorySearchProvider.java file in versions of the Alfresco Software Alfresco application for Android...
CVE-2019-15645
The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...
openITCOCKPIT Code Injection Vulnerability
openITCOCKPIT is a set of open source system monitoring tools . A code injection vulnerability exists in versions of openITCOCKPIT prior to 3.7.1. The vulnerability arises from external input data to construct code segments in the process , the network system or product is not properly filtered f...
GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2020-20392)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 versions prior to 5.3.2.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter...
CVE-2019-8447
The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery CSRF vulnerability...
CVE-2016-10924
The ebook-download plugin before 1.2 for WordPress has directory traversal...
CVE-2018-20980
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...
CVE-2016-10918
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF...
CVE-2016-10920
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...
CVE-2017-18559
The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...
CVE-2012-6714
The count-per-day plugin before 3.2.3 for WordPress has XSS via search words...
CVE-2016-10899
The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...
CVE-2016-10896
The seo-redirection plugin before 4.3 for WordPress has stored XSS...
Clam AntiVirus Denial of Service Vulnerability
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A denial of service vulnerability exists in ClamAV versions prior to 0.101.3, which can be exploited by attackers to cause ...