WordPress User Login History 1.5.2 Cross Site Scripting Vulnerability

WordPress User Login History plugin version 1.5.2 suffers from a cross site scripting vulnerability. Product: User Login History Wordpress Plugin - https://wordpress.org/plugins/user-login-history/ Vendor: Er Faiyaz Alam Tested version: 1.5.2 CVE ID: CVE-2017-15867 CVE description Multiple...

WordPress User Login History 1.5.2 Cross Site Scripting

Product: User Login History Wordpress Plugin - https://wordpress.org/plugins/user-login-history/ Vendor: Er Faiyaz Alam Tested version: 1.5.2 CVE ID: CVE-2017-15867 CVE description Multiple cross-site scripting XSS vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow...

erotik.markt.de XSS vulnerability

Vulnerable URL: http://erotik.markt.de/landkreis-region-hannover/anzeigen/er-sucht-ihn/?attrfigurecontacts=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Doctor X - ER On Wheels - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Doctor X - ER On Wheels published at the 'play' market has multiple vulnerabilities...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2511-1)

A race condition was discovered in the Linux kernel's key ring. A local user could cause a denial of service memory corruption or panic or possibly have unspecified impact via the keyctl commands. CVE-2014-9529 A memory leak was discovered in the ISO 9660 CDROM file system when parsing rock ridge...

Ubuntu: Security Advisory (USN-2513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-9584

CVE-2014-9584 affects the Linux kernel where the function parse_rock_ridge_inode_internal in fs/isofs/rock.c does not validate a length value in the ER System Use Field, enabling local users to obtain sensitive kernel memory via a crafted iso9660 image. This vulnerability exists in kernels before...

CVE-2014-4647

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-4647

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-4647

The CVE concerns the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect. A stack-based buffer overflow in the loadExtensionFactory method allows an attacker to execute arbitrary code on vulnerable installations. The explicit root cause is failure to validate the size of input...

(0Day) Embarcadero ER/Studio Data Architect TSVisualization ActiveX loadExtensionFactory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Embarcadero ER/Studio Data Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2014-2116

Cisco Emergency Responder (ER) 8.6 and earlier is affected by CVE-2014-2116 due to insufficient input validation in the web interface. An unauthenticated, remote attacker could inject web pages and modify dynamic content by exploiting parameters in the web UI (Web page injection). This is documen...

CVE-2014-2116

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2114

CVE-2014-2114 concerns a cross-site scripting (XSS) vulnerability in the Cisco Emergency Responder (ER) software, specifically the UserServlet, affecting 8.6 and earlier. The issue stems from insufficient input validation on a parameter, allowing an unauthenticated, remote attacker to inject arbi...

CVE-2013-3483

Stack-based buffer overflow in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ERS file...

Stack overflow

Stack-based buffer overflow in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ERS file...

CVE-2013-3482

Stack-based buffer overflow in the rfreporterror function in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in an ERS file...

CVE-2013-3483

Stack-based buffer overflow in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ERS file...

CVE-2013-3482

The CVE-2013-3482 issue affects Intergraph ERDAS ER Viewer before 13.0.1.1301, where a stack-based buffer overflow in rf_report_error (ermapper_u.dll) can be triggered by a long string in an ERS file. This leads to potential arbitrary code execution or a denial of service (application crash). Pub...