708 matches found
WordPress CM Download Manager plugin <= 2.7.0 - Authenticated Cross-Site Scripting (XSS) vulnerability
Authenticated Cross-Site Scripting XSS vulnerability found by qwebee in WordPress CM Download Manager plugin versions = 2.7.0. Solution Update the WordPress CM Download Manager plugin to the latest available version at least 2.8.0...
CVE-2020-27344
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS...
Cross site scripting
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS...
CVE-2020-27344
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS...
CVE-2020-27344
The CVE-2020-27344 entry corresponds to a Cross-Site Scripting (XSS) flaw in the WordPress plugin cm-download-manager, affected until version 2.8.0. The root cause is improper validation/sanitization of client-supplied data, specifically the uploaded filename in Content-Disposition, which can all...
ohp-cm-expert-cloud.com Cross Site Scripting vulnerability OBB-1418095
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unbreakable Enterprise kernel security update
4.14.35-2025.400.9 - btrfs: merge btrfsfinddevice and finddevice Anand Jain Orabug: 31867382 CVE-2019-18885 - sctp: implement memory accounting on tx path Xin Long Orabug: 31867387 CVE-2019-3874 - Revert 'zram: convert remaining CLASSATTR to CLASSATTRRO' Wade Mealing Orabug: 31867403 CVE-2020-107...
cm-musics.com Cross Site Scripting vulnerability OBB-1305957
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cm.ihu.gr Cross Site Scripting vulnerability OBB-1251655
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cm-viana-castelo.pt Improper Access Control vulnerability OBB-1247261
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unbreakable Enterprise kernel security update
4.14.35-1902.304.6 - bpf: fix sanitation rewrite in case of non-pointers Daniel Borkmann Orabug: 31552243 4.14.35-1902.304.5 - acpi: disallow loading configfs acpi tables when locked down Jason A. Donenfeld Orabug: 31493187 - selftests/bpf: do not run testkmod.sh for UEK5 Alan Maguire Orabug:...
cm-mealhada.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1167251 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cm-oeiras.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1154418 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-oeiras.pt website and it...
cm-vidigueira.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153451 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-vidigueira.pt website an...
cm-resende.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153031 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-resende.pt website and i...
cm-boticas.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149879 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-boticas.pt website and i...
cm-saoroquedopico.pt Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1148472 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-saoroquedopico.pt websit...
cm-azambuja.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144269 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cm-azambuja.pt website an...
Path traversal
SAP NetWeaver Knowledge Management, versions KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50, does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs,...
CVE-2020-6225
SAP NetWeaver Knowledge Management vulnerability CVE-2020-6225 involves path traversal due to insufficient validation of user-supplied path information. Affected are SAP NetWeaver Knowledge Management components (KMC-CM: 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50; KMC-WPC: 7.30, 7.31, 7.40, 7.50). ...