656 matches found
WordPress Huge IT Portfolio Gallery 2.0.77 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin ------------------------------------------------------------------------ Antonis Manaras, July 2016...
WordPress Calendar 1.3.7 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in Calendar WordPress Plugin ------------------------------------------------------------------------ Remco Vermeulen, July 2016 ------------------------------------------------------------------------...
Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to...
WordPress Photo Gallery by Supsystic plugin <= 1.8.5 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can steal users' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...
WordPress Count Per Day 3.5.4 Persistent Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...
WordPress WangGuard Plugin <= 1.7.1 - Cross Site Scripting
Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions. Solution Update the plugin...
WordPress Uji Countdown Plugin <= 2.0.6 - Cross-Site Scripting (XSS)
Because of this vulnerability, attackers can steal Administrators' session tokens, or perform arbitrary actions. Solution Update the plugin...
WordPress WP Live Chat Support 6.2.03 Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin ------------------------------------------------------------------------ Dennis Kerdijk & Erwin Kievith , July 2016...
WordPress Easy Testimonials 1.36.1 Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress Plugin ------------------------------------------------------------------------ Bente Schopman, July 2016...
WordPress Google Forms Plugin <= 0.84 - Cross Site Scripting (XSS)
Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...
WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting
Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million active installs. This issue allows an attacker to perform a...
Cisco Finesse Server-Side Request Forgery Vulnerability
Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. The software enhances call center service quality, improves customer experience, and increases agent satisfaction. A server-side request forgery vulnerability exists in Cisco Finesse, which stems from the...
Auction Camera vulnerable to URL whitelist bypass
Overview Auction Camera provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". Auction Camera contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout...
Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Synology Download Station ------------------------------------------------------------------------ Han Sahin, September 2015...
Synology Photo Station 6.2-2858 Cross Site Scripting
------------------------------------------------------------------------ Synology Photo Station multiple Cross-Site Scripting vulnerabilities ------------------------------------------------------------------------ Han Sahin, May 2015...
Reflected Cross-Site Scripting vulnerability in asdoc generated documentation
------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in asdoc generated documentation ------------------------------------------------------------------------ Radjnies Bhansingh, March 2014...
PT-2015-5898
Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9 Description The issue allows remote attackers to bypass nonce checks and perform arbitrary actions. This is achieved by sending a request that contains an action POST parameter, an action GET parameter, and ...
CVE-2015-2792: Improper Access Control
The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass nonce checks and perform arbitrary actions via a request containing an action POST parameter, an action GET parameter, and a valid nonce for the action GET...
Cross-Site Scripting vulnerability in Websense Data Security block page
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Websense Data Security block page ------------------------------------------------------------------------ Han Sahin, September 2014...
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Centralized Management Console
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Centralized Management Console ------------------------------------------------------------------------ Han Sahin, November 2014...