CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

Input validation

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

The CVE-2019-11166 issue affects Intel® Easy Streaming Wizard prior to version 2.1.0731. The root cause is improper file permissions in the installer, which could let an authenticated local user escalate privileges. Multiple sources (Intel advisory and vendor/press records) corroborate a local es...

WordPress Easy Updates Manager Plugin < 8.0.5 Authentication Bypass Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Ticket-Booking 1.4 Authentication Bypass

Exploit Title: Ticket-Booking 1.4 - Authentication Bypass Author: Cakes Discovery Date: 2019-09-14 Vendor Homepage: https://github.com/ABHIJEET-MUNESHWAR/Ticket-Booking Software Link: https://github.com/ABHIJEET-MUNESHWAR/Ticket-Booking/archive/master.zip Tested Version: 1.4 Tested on OS: CentOS ...

CVE-2019-14936

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

CVE-2019-14936

CVE-2019-14936 affects the WordPress plugin Easy!Appointments version 1.3.2. The vulnerability allows disclosure of sensitive information: usernames and password hashes. Public sources describe it as an information disclosure flaw in Easy!Appointments 1.3.2, with advisories noting a configuration...

PT-2019-13878 · WordPress · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy!Appointments plugin for WordPress version 1.3.2 Description: The issue allows for Sensitive Information Disclosure, specifically exposing usernames and password hashes. Recommendations: For Easy!Appointments plugin for WordPress version...

Intel® Easy Streaming Wizard Advisory

Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11166 Description: Improper file permissions in the installer for...

Roundcube Webmail <= 1.3.4 Insecure Permissions Vulnerability

Roundcube Webmail is prone to an insecure permissions vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

WordPress easy-property-listings plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-property-listings is a real estate website builder plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress Easy Digital Downloads < 2.9.16 XSS vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113488";...

CVE-2019-15842

The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS...

CVE-2019-15842

The CVE-2019-15842 entry concerns the WordPress plugin easy-pdf-restaurant-menu-upload (pre-1.1.2). A cross-site scripting (XSS) vulnerability exists in this plugin, allowing attackers to execute client-side code. Public details indicate the issue affects versions before 1.1.2; remediation is to ...

CVE-2019-15842

The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS...

CVE-2019-15817

The easy-property-listings plugin before 3.4 for WordPress has XSS...

Cross site scripting

The easy-property-listings plugin before 3.4 for WordPress has XSS...

CVE-2019-15817

The CVE-2019-15817 entry concerns the WordPress plugin Easy Property Listings prior to version 3.4, which is vulnerable to stored/reflected XSS in the plugin’s output handling. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CVE/CVE-List, WP vulnerability databases) w...