PT-2020-13025

Name of the Vulnerable Software and Affected Versions responsive-add-ons plugin versions prior to 2.2.7 for WordPress Description The issue concerns incorrect access control for wp-admin/admin-ajax.php?action= requests. This affects the responsive-add-ons plugin for WordPress, allowing unauthoriz...

CVE-2020-12073: Undefined Security Weakness

The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests...

Privilege Escalation

Mozilla Firefox is vulnerable to privilege escalation. Due to a flaw found in the way Firefox handled certain add-ons, a web page containing malicious content could cause an add-on to grant itself full browser privileges, which could lead to arbitrary code execution with the privileges of the use...

Privilege Escalation

firefox is vulnerable to privilege escalation. The vulnerability exists in the way Firefox loaded XML User Interface Language XUL scripts. Firefox and certain add-ons could load malicious content when certain policy checks did not happen...

GaussDB: Access permissions to ${GSDB_HOME}/add-ons

The GSDBHOME/lib and GSDBHOME/add-ons directories store GaussDB 100 shared components. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

CVE-2019-17332

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and...

CVE-2019-17331

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and includi...

CVE-2019-17331

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and includi...

CVE-2019-17332

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and...

CVE-2019-17332 TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and...

CVE-2019-17332

The CVE-2019-17332 issue affects TIBCO EBX Add-ons’ Digital Asset Manager Web Interface. Affected releases include EBX Add-ons up to 3.20.13 and 4.1.0, 4.2.0, 4.2.1, and 4.2.2. Description: authenticated users can perform stored cross-site scripting (XSS) attacks due to improper input handling in...

CVE-2019-17331

The CVE-2019-17331 issue affects TIBCO EBX Add-ons Data Exchange Web Interface. Affected versions are EBX Add-ons

PT-2019-15092

Name of the Vulnerable Software and Affected Versions TIBCO EBX Add-ons versions up to and including 3.20.13 TIBCO EBX Add-ons version 4.1.0 Description The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an issue that theoretically allows authenticated...

PT-2019-15093

Name of the Vulnerable Software and Affected Versions TIBCO EBX Add-ons versions up to and including 3.20.13 TIBCO EBX Add-ons versions 4.1.0 through 4.2.2 Description The Digital Asset Manager Web Interface component contains a vulnerability that theoretically allows authenticated users to perfo...

CVE-2019-17332: Improper Neutralization of Input During Web Page Generation

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and...

CVE-2019-17331: Improper Neutralization of Input During Web Page Generation

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and includi...

WordPress YITH WooCommerce Product Add-Ons plugin <=1.5.21 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Product Add-Ons plugin versions =1.5.21. Solution Update the WordPress YITH WooCommerce Product Add-Ons plugin to the latest available version at least 1.5.23...

CVE-2017-18456

cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...

CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This...

CVE-2019-11723

CVE-2019-11723 affects Mozilla Firefox prior to version 68, where during add-on installation the initial fetch ignored origin attributes of the browsing context, potentially leaking cookies in private browsing or across Firefox Multi-Account Containers. The issue is documented in multiple sources...