7650 matches found
WordPress WP Easy Gallery Plugin <= 2.7 - Multiple Cross Site Request Forgery
This plugin is prone to multiple admin function cross site request forgery vulnerability. Solution Update plugin...
WordPress Event Easy Calendar Plugin <= 1.0.0 - Multiple Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Remove this plugin from your WordPress installation...
WordPress WP Easy Gallery Plugin <= 2.7 - SQL Injection
This plugin is prone to SQL injection via admin/overview.php galleryId parameter and admin/add-images.php multiple parameter. Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...
WordPress WP Easy Gallery Plugin <= 4.1.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
EasyCTF vulnerable to arbitrary file creation
Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities
Exploit for multiple platform in category web applications Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities Product & Service Introduction: =============================== The integrated customer management, digital customer file is the central record for a sing...
Multiple Easy Digital Downloads Plugins - Cross-Site Scripting Issue
Some of the extension were also vulnerable, but could not determine their slug/fixed version, such as the edd-amazon-s3 fixed in ??...
Multiple Elevation of Privilege Vulnerabilities in HP
HP Easy Tools is a toolkit developed by Hewlett-Packard HP based on a wizard mode to guide the administrators of users in the financial industry for the initial installation and configuration of virtualization, easy and fast deployment. A security vulnerability exists in certain HP clients runnin...
HP has multiple remote code execution vulnerabilities
HP Easy Deploy is an automated deployment tool. A remote code execution vulnerability exists in HP Easy Deploy distributed by HP Easy Tools on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620,t820 devices, which allows remote attackers to exploit...
CVE-2015-2113
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...
CVE-2015-2112
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via...
Code injection
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...
Code injection
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via...
CVE-2015-2113
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...
CVE-2015-2113
HP Easy Deploy in HP Easy Tools prior to 3.0.1.1650 on HP Thin Client t5540/t5740/t5740e and Flexible Thin Client t510/t520/t610/t620/t820 allows remote arbitrary-code execution and privilege escalation. Root cause vectors are not specified in the provided documents, but the security bulletin sta...
CVE-2015-2112
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via...
CVE-2015-2112
HP Easy Deploy on HP Thin Clients (Windows Embedded Standard 7/2009) prior to version 3.0.1.1650, bundled with HP Easy Tools, is affected. The CVE-2015-2112 entry corresponds to remote elevation of privilege and execution of code by remote, authenticated users via unknown vectors on devices: t554...
[security bulletin] HPSBHF03310 rev.1 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES09) with HP Easy Deploy, Remote Elevation of Privilege, Execution of Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04629160 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04629160 Version: 1 HPSBHF03310 rev....
WP Easy Slideshow <= 1.0.3 - Multiple Cross-Site Request Forgery (CSRF)
The wp-easy-slideshow WordPress plugin was affected by a Multiple Cross-Site Request Forgery CSRF security vulnerability...
WordPress WP Easy Slideshow Plugin 1.0.3 - Multiple Vulnerabilities
WP Easy Slideshow plugin is prone to multiple vulnerabilities, such as arbitrary file upload using CSRF and delete operation using CSRF vulnerabilities. Upload scripts allow to upload arbitrary files. Solution Update the plugin...