411 matches found
PT-2019-7322
Name of the Vulnerable Software and Affected Versions iThemes Exchange versions prior to 1.12.0 Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For versions prior to 1.12.0, update to version 1.12.0 or lat...
PT-2019-7336
Name of the Vulnerable Software and Affected Versions iThemes Builder Theme Depot versions prior to 5.0.30 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 5.0.30, update to version 5.0.30 ...
PT-2019-7326
Name of the Vulnerable Software and Affected Versions Easy Canadian Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy Canadian Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting...
PT-2019-7325
Name of the Vulnerable Software and Affected Versions Custom URL Tracking Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with Custom URL Tracking Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add...
PT-2019-7315
Name of the Vulnerable Software and Affected Versions wp-vipergb plugin versions prior to 1.3.16 Description The issue concerns a cross-site scripting XSS problem. It is related to the use of add query arg and remove query arg functions. Recommendations For versions prior to 1.3.16, update to...
PT-2019-7329
Name of the Vulnerable Software and Affected Versions Invoices Add-on for iThemes Exchange versions prior to 1.4.0 Description The issue concerns a problem with the Invoices Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add query arg and remove...
PT-2019-7330
Name of the Vulnerable Software and Affected Versions Manual Purchases Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the Manual Purchases Add-on for iThemes Exchange before version 1.1.0 for WordPress, where there is a potential for XSS via th...
PT-2019-7333
Name of the Vulnerable Software and Affected Versions iThemes Exchange Stripe Add-on for WordPress version 1.2.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.2.0, update t...
PT-2019-8511
Name of the Vulnerable Software and Affected Versions mailchimp-for-wp plugin versions prior to 4.1.8 Description The issue concerns a problem where the return value of add query arg can be exploited, leading to XSS. Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to...
PT-2019-7280
Name of the Vulnerable Software and Affected Versions shortcode-factory plugin versions prior to 1.1.1 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the add query arg function. Recommendations For versions prior to 1.1.1, update to versi...
PT-2019-7253
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...
PT-2019-7255
Name of the Vulnerable Software and Affected Versions download-monitor plugin versions prior to 1.7.1 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the add query arg function. No information is provided about the estimated number of potentially affected...
PT-2019-7264 · WordPress · Wp-Google-Map-Plugin
Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.7 Description: The issue is related to Cross-Site Scripting XSS and involves the add query arg and remove query arg functions. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or...
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-118.24.3 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28710010 CVE-2018-14634...
CVE-2018-8013
In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization...
[slackware-security] rsync
New rsync packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/rsync-3.1.3-i586-1slack14.2.txz: Upgraded. This update fixes two security issues: Fixed a buffer overru...
The vulnerability of the “/web/google_analytics.php” microprogramming software of Western Digital MyCloud NAS allows a intruder to execute arbitrary commands.
The vulnerability of the “/web/googleanalytics.php” microprogramming software of Western Digital MyCloud NAS is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands using a specially...
CVE-2017-17518
CVE-2017-17518 affects swt/motif/browser.c in White_dune (whitedune) 0.30.10, where strings are not validated before launching the program specified by the BROWSER environment variable. This could enable remote attackers to perform argument-injection attacks via a crafted URL. Notes in multiple s...
