4742 matches found
CVE-2017-18501
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18502
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues...
PT-2019-7264 · WordPress · Wp-Google-Map-Plugin
Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...
Unspecified vulnerability in cPanel (CNVD-2019-27410)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 58.0.4. An attacker can exploit the vulnerability to perform...
PDFResurrect buffer overflow vulnerability (CNVD-2020-16832)
PDFResurrect is a tool for analyzing PDF documents. A buffer error vulnerability exists in the 'pdfloadpageskids' function of the pdf.c file in versions of PDFResurrect prior to 0.18, which can be exploited by an attacker to cause malloc failures and out-of-bounds writes...
cPanel cross-site scripting vulnerability (CNVD-2019-30472)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the tailea4migration.cgi interface in cPanel versions prior to 60.0.25. T...
Unspecified vulnerability in cPanel (CNVD-2019-27420)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 60.0.25. An attacker can exploit the vulnerability to overwrite...
LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp
An error within the "parsesinaria" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources...
opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...
opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()
A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
cPanel Input Validation Error Vulnerability (CNVD-2019-26343)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability stems from a web-based...
cPanel cross-site scripting vulnerability (CNVD-2019-30460)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 70.0.23. An attacker can exploit the vulnerability to execut...
invenio-previewer cross-site scripting vulnerability
invenio-previewer is an Invenio module for previewing files. A cross-site scripting vulnerability exists in versions prior to invenio-previewer 1.0.0a12. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability ...
cPanel cross-site scripting vulnerability (CNVD-2019-26199)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...
cPanel SQL Injection Vulnerability (CNVD-2019-26253)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of validation of...
CVE-2017-18413
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
Nextcloud Android app code injection vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. A code injection vulnerability exists in versions of the Nextcloud Android app prior to 3.7.0, which arises from the failure of a network system or product to properly filter...