1093 matches found
WordPress photo-gallery plugin cross-site scripting vulnerability (CNVD-2019-31205)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress photo-gallery plugin...
WordPress rating-bws plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rating-bws is a user rating, scoring plugin used in it. A cross-site scripting vulnerability exists in versions of the WordPress...
cPanel Information Disclosure Vulnerability (CNVD-2019-26346)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 64.0.21. An attacker can exploit the vulnerability to...
cPanel cross-site scripting vulnerability (CNVD-2019-26353)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...
CVE-2019-7899
Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
DEBIAN-CVE-2018-20861
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...
WordPress Advanced CF7 DB SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced CF7 DB is a contact form plugin used in it. A SQL injection vulnerability exists in WordPress Vsourz Digital Advanced CF7 DB...
CVE-2019-2865
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...
Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2019-22204)
Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.2.24. An attacker can exploit this vulnerability to elevate privileges, disclose information, or cause a denial of servic...
Unspecified Vulnerability in ASUS HiVivo aspplication for ASUS Watch
ASUS HiVivo aspplication for ASUS Watch is an application for ASUS smartwatch from Asus ASUS of Taiwan, China. The program focuses on monitoring heart rate and exercise track etc. through the smartwatch. A security vulnerability exists in ASUS HiVivo aspplication for ASUS Watch prior to version...
Cisco Digital Network Architecture (DNA) Center Authentication Bypass Vulnerability
Cisco DNA Center is a complete software-based network automation and assurance solution. An authentication bypass vulnerability exists in Cisco Digital Network Architecture DNA Center versions prior to 1.3. The vulnerability stems from insufficiently restricted access to ports required for system...
CVE-2019-11988
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-5346
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11944
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11945
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2019-11820
Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...
MAAS Cross-Site Scripting Vulnerability
Canonical Ubuntu Metal as a Service MAAS is a suite of cloud server deployment and management tools from Canonical in the UK. The tool enables centralized deployment and management of a large number of server hardware environments. A cross-site scripting vulnerability exists in the REST API in...
Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2019-10620)
Adobe Shockwave Player is a multimedia player product from the American company Adobe. The product is able to Adobe Director a multimedia production software produced by the application published to the Internet, installed with the Shockwave plug-in browser can be viewed. A memory corruption...
