WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

GHSA-PJ4G-4488-WMXM Dynamic modification of RPyC service due to missing security check

Impact Version 4.1.0 of RPyC has a vulnerability that affects custom RPyC services making it susceptible to authenticated remote attacks. Patches Git commits between September 2018 and October 2019 and version 4.1.0 are vulnerable. Use a version of RPyC that is not affected. Workarounds The commi...

Malwarebytes Endpoint Protection Backlink Vulnerability

Malwarebytes Endpoint Protection is an endpoint protection software from the US-based Malwarebytes Inc. The software provides complete malware protection and remediation with accurate threat detection, proactive threat blocking, and thorough remediation. A security vulnerability exists in...

SAP BusinessObjects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2020-62466)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An information disclosure vulnerability exists in SAP Business Object...

KDE Partition Manager Command Injection Vulnerability

KDE Partition Manager is a disk partitioning software for Linux from the KDE community. The software manages disks, partitions and file systems, can create, delete, copy, backup and restore partitions, and supports a variety of partition formats, including: ext2/3, reiserfs, NTFS, FAT32, etc.. A...

Sick Package Analytics Information Disclosure Vulnerability

Sick Package Analytics is a system performance monitoring software for automatic identification systems from Sick. A security vulnerability exists in SICK Package Analytics V04.1.1 and later versions, which stems from the program failing to properly set default permissions. The vulnerability can ...

CVE-2020-6218

Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Information Disclosure...

PT-2019-14725 · Jenkins · Jenkins Rapiddeploy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin version 4.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy Plugin version 4.1 and earlier, updat...

Suricata Buffer Overflow Vulnerability (CNVD-2019-34383)

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

PT-2019-7062 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 4.1.0 Description: The issue concerns JavaScript injections in the wp-live-chat-support plugin for WordPress. Recommendations: For versions prior to 4.1.0, update to version 4.1.0 or later to...

CVE-2019-0348

SAP BusinessObjects Business Intelligence Platform Web Intelligence, versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted...

CVE-2019-0331

Under certain conditions, SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure...

CVE-2018-2479

SAP BusinessObjects Business Intelligence Platform BIWorkspace, versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

PowerDNS Recursor Denial of Service Vulnerability (CNVD-2018-23738)

PowerDNS Recursor aka pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability exists in PowerDNS Recursor versions 4.0.0 through 4.1.4. A remote attacker can exploit this vulnerability by sending DNS queries to cause a denial of service...

CVE-2018-16663

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parserelations in os/storage/antelope/aql-parser.c while parsing AQL storage of relations...

Dell EMC RSA BSAFE Micro Edition Suite Integer Overflow Vulnerability

Dell EMC RSA BSAFE Micro Edition Suite MES is an encryption toolkit from Dell USA. The toolkit can help developers achieve stable and secure application design. An integer overflow vulnerability exists in Dell EMC RSA BSAFE MES version 4.1.6. A remote attacker could exploit this vulnerability to...

SAP BusinessObjects Business Intelligence Platform Admin Tools Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product features report generation, analysis, data visualization, etc. Admin Tools is one of the management tools. An information disclosure...

File Upload Vulnerability in CSCMS

CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology, which uses PHP5+MYSQL as the technical basis for development. Using OOP object-oriented approach to build the basic operating framework. CSCMS v4.1 RELEASE 20170605 version of the file...

SAP Business Objects Remote Code Injection Vulnerability

SAP Business Objects is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The program provides reporting, performance management and data base and other functions. A remote code injection vulnerability exists in SAP Business Objects, version 4.0 4.1...

CScms Cross-Site Request Forgery Vulnerability

CScms is a content management system CMS developed on a CI framework. A cross-site scripting vulnerability exists in the plugins/sys/admin/Sys.php file in CScms version 4.1. A remote attacker can exploit this vulnerability to change the administrator name and password with the help of the...