PT-2019-16364

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9205 through MDM9655 Qualcomm Snapdragon Compute versions MDM9205 through MDM9655 Qualcomm Snapdragon Connectivity versions MDM9205 through MDM9655 Qualcomm Snapdragon Consumer Electronics Connectivity...

A Leader in the 2019 Gartner Magic Quadrant for WAF, Six Years Running

Gartner has published its 2019 Gartner Magic Quadrant for Web Application Firewalls WAF and Imperva has been named a Leader for the sixth consecutive year! Along with our WAF Gateways and easy-to-deploy Cloud WAF we recently added API Security, RASP, Account Takeover Protection, Bot Management, a...

Magic AirMusic Detection (HTTP)

The script sends a HTTP request to the remote host and attempts to detect the presence of a Magic AirMusic device. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

WordPress magic-fields plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32383)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32372)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2017-18611

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...

CVE-2017-18610

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...

CVE-2017-18609

The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...

Design/Logic Flaw

The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...

CVE-2017-18610

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...

CVE-2017-18610

The CVE-2017-18610 issue affects the WordPress plugin “magic-fields” (before 1.7.2). The vulnerability is an XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter, as reported across multiple sources (Red Hat, CNVD, NVD mirrors, OSV, CVE lists). Impact described in sources is clie...

CVE-2017-18609

The CVE-2017-18609 entry concerns the WordPress plugin magic-fields, specifically versions before 1.7.2, which is vulnerable to cross-site scripting via the custom-write-panel-id parameter. Affected component: magic-fields plugin for WordPress. Root cause: XSS vulnerability in handling the custom...

PT-2019-8542

Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a cross-site scripting XSS flaw. It is located in the RCCWP CreateCustomFieldPage.php file and is related to the custom-field-css parameter. This parameter is vulnerabl...

CVE-2017-18611: Improper Neutralization of Input During Web Page Generation

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...

PT-2019-8541

Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a Cross-Site Scripting XSS vulnerability. It affects the magic-fields plugin for WordPress, specifically through the custom-group-id parameter in the RCCWP...

CVE-2017-18610: Improper Neutralization of Input During Web Page Generation

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...

PT-2019-8540

Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the custom-write-panel-id parameter. Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later ...

CVE-2017-18609: Improper Neutralization of Input During Web Page Generation

The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...

Remote Code Execution

spoon/library is vulnerable to remote code execution. Lack of validation of the cookie allows a remote attacker to submit a cookie containing malicious executable objects that will execute upon deserialization in the wakeup magic method in spoon/cookie/cookie.php...