4654 matches found
CVE-2018-18499
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...
[SECURITY] Fedora 29 Update: kernel-4.20.11-200.fc29
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.20.11-100.fc28
The kernel meta package...
Jenkins Plugin Script Security 1.49Declarative 1.3.4Groovy 2.60 - Remote Code Execution
Jenkins Plugin Script Security 1.49Declarative 1.3.4Groovy 2.60 - Remote Code Execution !/usr/bin/env python Exploit Title : jenkins-preauth-rce-exploit.py Date : 02/23/2019 Authors : wetw0rk & 0xtavian Vendor Homepage : https://jenkins.oi Software Link : https://jenkins.io/download/ Tested on :...
WordPress RCE Vulnerability (CVE-2019-8942) - Windows
WordPress allows remote code execution RCE because an wpattachedfile Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif...
Arbitrary Code Execution
wordpress is vulnerable to arbitrary code execution. The vulnerability exists in the wpattachedfile post meta entry when a user with author privilege passes a malicious image with exif metadata causing the Post Meta entry to change to an arbitrary substring such as a .jpg?file.php...
DEBIAN-CVE-2019-8942
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an wpattachedfile Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image...
WordPress Import users from CSV with meta Plugin < 1.12.1 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112516";...
[SECURITY] Fedora 29 Update: kernel-4.20.8-200.fc29
The kernel meta package...
[SECURITY] Fedora 29 Update: kernel-4.20.6-200.fc29
The kernel meta package...
Meta Box < 4.16.3 - Unauthorised File Deletion
The Meta Box – WordPress Custom Fields Framework WordPress plugin was affected by an Unauthorised File Deletion security vulnerability...
[SECURITY] Fedora 29 Update: kernel-4.20.5-200.fc29
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.20.5-100.fc28
The kernel meta package...
Meta Box < 4.16.2 - Mishandled Uploaded Files
The Meta Box – WordPress Custom Fields Framework WordPress plugin was affected by a Mishandled Uploaded Files security vulnerability...
USN-3871-2 linux regression
USN-3871-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, that update introduced regressions with docking station displays and mounting ext4 file systems with the metabg option enabled. This update fixes the problems. We apologize for the inconvenience. Original...
[SECURITY] Fedora 28 Update: kernel-4.19.16-200.fc28
The kernel meta package...
Path Traversal
github.com/kubernetes/kubernetes is vulnerable to path traversal attacks. The attacks are possible because it does not validate the names of all object types ObjectMeta in BeforeCreate before passing them to etcd to generate etcd key...
Authorization Bypass
openstack-glance is vulnerable to authorization bypass. A flaw was discovered in the OpenStack Image service where a tenant could manipulate the status of their images by submitting an HTTP PUT request together with an 'x-image-meta-status' header. A malicious tenant could exploit this flaw to...