2490 matches found
CVE-2016-11002
The CVE-2016-11002 entry affects the Elegant Themes Extra theme for WordPress, up to version 1.2.4 (pre-1.2.4). The vulnerability is a privilege escalation in the theme, enabling higher-privilege actions by users. Public references describe it as a privilege-escalation issue in Elegant Themes pro...
CVE-2016-11002
The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
Design/Logic Flaw
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-16250
CVE-2019-16250 affects the WordPress plugin Ocean Extra (
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
WordPress Ocean Extra plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...
CVE-2019-2121
In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Andro...
Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free Exploit
Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free in blink::PresentationAvailabilityState::UpdateAvailability iterating&iteratinglisteners, true; for auto& listenerref : availabilitylisteners auto listener = listenerref.get; if !listener-urls.Containsurl continue; auto...
CVE-2018-18670
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
CVE-2018-18670
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
Code injection
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
PT-2019-9616 · Gnuboard · Gnuboard5
Name of the Vulnerable Software and Affected Versions: GNUBOARD5 version 5.3.1.9 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the Extra Contents parameter, also known as the cf 110 parameter in the adm/config form update.php file. This enables attacker...
WordPress Ocean Extra plugin <= 1.5.8 - Unauthenticated CSS injection vulnerability
Unauthenticated CSS injection vulnerability found by Jerome Bruandet in WordPress Ocean Extra plugin versions = 1.5.8. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.5.9...
The vulnerability of the __usb_get_extra_descriptor function in the USB subsystem of Linux kernel systems allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the usbgetextradescriptor function in the USB subsystem’s driver code drivers/usb/core/usb.c in Linux kernels is related to errors in reading the additional descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of th...
WordPress Ocean Extra plugin <= 1.5.8 - Unauthenticated Settings change vulnerability
Unauthenticated Settings change vulnerability found by Jerome Bruandet in WordPress Ocean Extra plugin versions = 1.5.8. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.5.9...
Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection
The Ocean Extra WordPress plugin was affected by an Unauthenticated Settings change and CSS injection security vulnerability...
Microsoft Adds 2FA-Protected "Personal Vault" Within OneDrive Cloud Storage
Microsoft has introduced a new password-protected folder within its OneDrive online file storage service that will allow you to keep your sensitive and important files protected and secured with an extra layer of authentication. Dubbed Personal Vault, the new OneDrive folder can only be accessed...
