CVE-2015-10011

CVE-2015-10011 affects OpenDNS OpenResolve, specifically the resolverapi/endpoints.py component. The root cause is improper output neutralization for logs, enabling high-severity impact per CVSSv3.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8). A patch is identified (9eba6ba5abd...

CVE-2015-10011: Improper Output Neutralization for Logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is...

CVE-2022-4410

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

Cross site scripting

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

CVE-2022-4410 Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

PT-2022-25570

Name of the Vulnerable Software and Affected Versions Activity Log Plugin affected versions not specified Description A vulnerability has been found in the Activity Log Plugin, affecting an unknown functionality of the component HTTP Header Handler. The manipulation of the X-Forwarded-For argumen...

PT-2022-25543

Name of the Vulnerable Software and Affected Versions Opal Login History Plugin affected versions not specified Description A problematic vulnerability has been found in the Opal Login History Plugin, affecting the HTTP Header Handler component. The issue arises from the manipulation of the...

PT-2022-25540

Name of the Vulnerable Software and Affected Versions Show Visitor IP Plugin affected versions not specified Description A vulnerability was found in the Show Visitor IP Plugin, affecting some unknown functionality of the component HTTP Header Handler. The manipulation of the X-Forwarded-For...

PT-2022-25495

Name of the Vulnerable Software and Affected Versions Aleksandr R alx ip statistic Plugin affected versions not specified Description A problematic issue has been found in the HTTP Header Handler component of the Aleksandr R alx ip statistic Plugin. The manipulation of the X-Forwarded-For argumen...

PT-2022-25585

Name of the Vulnerable Software and Affected Versions WP White Security WP Activity Log Plugin affected versions not specified Description A vulnerability was found in the WP White Security WP Activity Log Plugin, affecting an unknown part of the component HTTP Header Handler. The manipulation of...

PT-2022-25562

Name of the Vulnerable Software and Affected Versions MyTechTalky User Location and IP Plugin affected versions not specified Description A problematic vulnerability was found in the HTTP Header Handler component of the MyTechTalky User Location and IP Plugin. The issue arises from the manipulati...

Design/Logic Flaw

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. T...

CVE-2022-4011 Simple History Plugin Header neutralization for logs

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. T...

CVE-2022-4011: Improper Neutralization

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. T...

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2022-3941: Improper Neutralization

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2022-3941 Activity Log Plugin HTTP Header neutralization for logs

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2022-3941

The CVE-2022-3941 entry describes a vulnerability in the Activity Log Plugin’s HTTP Header Handler, where manipulating the X-Forwarded-For argument causes improper output neutralization in logs. Affected component: HTTP Header Handler within the WordPress Activity Log Plugin. Impact as stated: re...

CVE-2022-1522

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics...

Input validation

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics...