TP-Link TL-WR841N and TL-WR841ND Cross-Site Request Forgery Vulnerability

The TP-Link TL-WR841N and TL-WR841ND are both wireless router devices. TP-Link TL-WR841N and TL-WR841ND cross-site request forgery vulnerability. An attacker could use this vulnerability to perform certain administrator actions and gain unauthorized access to affected applications, and other...

CVE-2018-1000512

Tooltipy Tooltipy tooltips for WP version 5 contains a Cross Site Scripting XSS vulnerability in Glossary shortcode that can result in could allow anybody to do almost anything an admin can. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been...

CVE-2018-1000506

Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery CSRF vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must...

CVE-2018-1000508

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-1000506

Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery CSRF vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must...

TIBCO Administrator - Enterprise Edition TIBCO Administrator server component cross-site scripting vulnerability

TIBCO Administrator is an application for deploying TIBCO products from TIBCO Software, USA. The program supports deploying TIBCO products, managing users, monitoring hosts, etc. TIBCO Administrator-Enterprise Edition is its enterprise edition.TIBCO Administrator server is one of the management...

Siemens TIM 1531 IRC Security Bypass Vulnerability

The Siemens TIM 1531 IRC is a communication module from Siemens that handles data transfer using the Siemens remote control protocol SINAUT ST7. A security vulnerability exists in the Siemens TIM 1531 IRC prior to version 1.1. A remote attacker could use this vulnerability to perform administrati...

PT-2018-18161 · Otrs +2 · Otrs +2

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 5.0.0 through 5.0.24 Open Ticket Request System OTRS versions 6.0.0 through 6.0.1 Description: The issue allows authenticated admins to exploit a Blind Remote Code Execution vulnerability by loading a...

IBM Security Guardium Database Activity Monitor Authorization Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. An authorization vulnerability exists in IBM Security Guardium Databas...

CVE-2018-1368

IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions that only an admin should be performing, so there is risk that someone not authorized can change things that they are not suppose to. IBM...

Siemens TeleControl Server Basic Elevation of Privilege Vulnerability

Siemens TeleControl Server Basic is a remote control system for Siemens equipment from Siemens, Germany. A security vulnerability exists in Siemens TeleControl Server Basic versions prior to 3.1. An attacker could use this vulnerability to elevate privileges and perform administrative operations...

WordPress responsive-coming-soon-page plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site request...

CVE-2018-0011 Junos Space: Reflected XSS vulnerability in Junos Space management interface

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...

CVE-2018-0011

CVE-2018-0011 is a reflected XSS vulnerability in Junos Space management interface. The issue allows a remote authenticated user to inject web script or HTML, potentially steal session data/credentials and perform administrative actions on the Junos Space device. Connected sources (e.g., NVD entr...

Salutation Responsive WordPress + BuddyPress Theme Cross-Site Scripting Vulnerability

Salutation Responsive WordPress + BuddyPress Theme is a responsive WordPress theme used in WordPress. A cross-site scripting vulnerability exists in Salutation Responsive WordPress+BuddyPress Theme version 3.0.15. A remote attacker can exploit this vulnerability to perform administrator actions...

CVE-2017-1000227

Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can...

CVE-2017-1000225

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssididyoumean could allow unauthenticated attacker to do almost anything an admin can...

phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33507)

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

CVE-2016-4923

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

pulp-consumer-client design flaws

pulp-consumer-client is a client for the Pulp platform codebase from the Pulp team. A design vulnerability exists in pulp-consumer-client versions 2.4.0 through 2.6.3, which stems from the program's failure to detect the server's TLS certificate signature. An attacker can exploit the vulnerabilit...