4313 matches found
WordPress memphis-documents-library plugin input validation error vulnerability (CNVD-2019-30745)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. memphis-documents-library is a document library plugin for organizing and distributing documents used in it. An input validation error...
WordPress memphis-documents-library plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. memphis-documents-library is a document library plugin for organizing and distributing documents used in it. An input validation error...
WordPress memphis-documents-library plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. memphis-documents-library is a document library plugin for organizing and distributing documents used in it. A cross-site scripting...
GHSA-4Q98-WR72-H35W Improper input validation in Apache Santuario XML Security for Java
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...
PYSEC-2019-174
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document or web page...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document or web page...
Django CRM 0.2.1 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-si...
Code injection
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...
CVE-2019-12400
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...
CVE-2019-12400
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...
CVE-2014-10384
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...
CVE-2014-10385
The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...
CVE-2014-10383
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
Design/Logic Flaw
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...
Remote file inclusion
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
Cross site request forgery (csrf)
The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...
CVE-2014-10385
CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...
