2948 matches found
CVE-2019-15943
Summary: CVE-2019-15943 affects Counter-Strike: Global Offensive’s vphysics.dll prior to 1.37.1.1. A crafted map mishandled during a memset call can allow remote attackers to trigger code execution or a denial of service by inviting a victim to a crafted gaming server. The Red Hat/NVD entries des...
Cisco HyperFlex Software Data Forgery Issue Vulnerability
Cisco HyperFlex is Cisco's hyperconverged infrastructure HCI platform built to meet the needs of multi-cloud IT, supporting any application, anywhere, with a simple hyperconverged infrastructure. A counter value injection vulnerability exists in the Statistics Information Collection Service in...
Cisco HyperFlex Software Counter Value Injection Vulnerability
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could explo...
Counter-Strike Global Offensive 1.37.1.1 - 'vphysics.dll' Denial of Service (PoC)
CVE-2019-15943 Counter-Strike Global Offensive vphysics.dll before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map using memory corruption. Description: We are need modifying...
Counter-Strike Global Offensive 1.37.1.1 - (vphysics.dll) Denial of Service Exploit
CVE-2019-15943 Counter-Strike Global Offensive vphysics.dll before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map using memory corruption. Description: We are need modifying...
Counter-Strike Global Offensive 1.37.1.1 - vphysics.dll Denial of Service (PoC)
Counter-Strike Global Offensive 1.37.1.1 - vphysics.dll Denial of Service PoC CVE-2019-15943 Counter-Strike Global Offensive vphysics.dll before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, becaus...
CVE-2016-10981
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...
CVE-2016-10982
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...
CVE-2016-10980
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...
Cross site scripting
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...
Cross site scripting
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...
Cross site request forgery (csrf)
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...
CVE-2016-10982
The kento-post-view-counter WordPress plugin (up to version 2.8) has a CSRF vulnerability in wp-admin/admin.php?page=kentopvc_settings. This affects the plugin’s settings page and could enable unauthorized actions when a user interacts with the UI. The provided documents do not include a patch ve...
CVE-2016-10981
CVE-2016-10981 affects the kento-post-view-counter WordPress plugin (up to version 2.8). The vulnerability is stored XSS triggered through the fields kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. Attack context is network access with no required authentication and user in...
CVE-2016-10980
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...
CVE-2016-10980
CVE-2016-10980 affects the WordPress plugin kento-post-view-counter up to version 2.8. The vulnerability is an XSS via the parameter kento_pvc_geo. Multiple connected sources corroborate the XSS vector, with additional notes from WPVulnDB indicating CSRF and multiple XSS vectors in the same plugi...
WordPress kama-clic-counter plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...
CVE-2017-18614
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...