2948 matches found
CVE-2017-18614
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...
Cross site scripting
The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...
Sql injection
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...
CVE-2017-18615
The CVE-2017-18615 entry concerns the Kama Click Counter WordPress plugin, specifically versions prior to 3.5.0, which is affected by a cross-site scripting (XSS) vulnerability. The vulnerability is documented across multiple sources (NVD, RH, Red Hat, WPVulndb, CVE list) with consistent wording ...
CVE-2017-18615
The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...
CVE-2017-18614
CVE-2017-18614 affects the WordPress plugin kama-clic-counter (v3.4.9) . Multiple connected sources confirm a SQL injection vulnerability exposed via the plugin’s admin.php, specifically the order parameter . The root cause is described as a lack of validation of externally entered SQL statements...
CVE-2017-18614
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...
kernel: Count overflow in FUSE request leading to use-after-free issues.
A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attack...
kernel: Count overflow in FUSE request leading to use-after-free issues.
A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attack...
CVE-2019-15944
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message...
CVE-2019-15944
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message...
Design/Logic Flaw
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message...
CVE-2019-15944
CVE-2019-15944 affects Counter-Strike: Global Offensive, specifically community game servers, with the issue described as displaying unsafe HTML in a disconnection message prior to 2019-08-29. Supported documents confirm the target is CS:GO game servers and the vulnerability arises from unsafe HT...
WordPress post-pay-counter plugin permission license and access control issue vulnerability
WordPress is the WordPress Foundation's set of blogging platform using PHP language development. The platform supports PHP and MySQL servers to set up a personal blog site. post-pay-counter is used in one of the online paid content billing, management plug-ins. WordPress post-pay-counter plugin h...
WordPress post-pay-counter plugin injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform using PHP language development. The platform supports PHP and MySQL servers to set up a personal blog site. post-pay-counter is used in one of the online paid content billing, management plug-ins. An injection vulnerability exists i...
WordPress rich-counter plugin injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rich-counter is a counter plugin used in it. There is an injection vulnerability in the WordPress rich-counter plugin, and no detailed...
CVE-2014-10394
The CVE-2014-10394 entry affects the WordPress Rich Counter plugin prior to version 1.2.0. The vulnerability is a JavaScript injection resulting from a crafted User-Agent header, as documented across multiple sources (NVD entry and vendor/Red Hat references). The practical impact is an injection ...
CVE-2017-18584
The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action...