9575 matches found
WordPress Mobile Pack Plugin Information Disclosure Vulnerability
WordPress Mobile Pack Plugin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-5337
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...
CVE-2014-5337
WordPress Mobile Pack Plugin for WordPress is affected (versions before 2.0.2). An information-disclosure vulnerability allows remote attackers to read password-protected posts via an exportarticles action to export/content.php. Remediation: update to version 2.0.2 or later.
CVE-2014-5337
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...
Default credentials
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...
WordPress All In One SEO Pack 2.2.2 Cross Site Scripting
Author: 1N3 Website: http://xerosecurity.com Vendor Website: https://wordpress.org/plugins/all-in-one-seo-pack/ Affected Product: All In One SEO Pack Affected Version: 2.2.2 ABOUT: All in One SEO Pack is a WordPress SEO plugin to automatically optimize your WordPress blog for Search Engines such ...
BlazeDVD Pro 7.0 Buffer Overflow
BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, Win 8.1 !/usr/bin/python from struct import pack buffer=...
WordPress Mobile Pack Plugin <= 2.0.1 - Information Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an exportarticles action to export/content.php. Solution Update the plugin...
Microsoft OneNote Remote Code Execution Vulnerability (2977201)
This host is missing an important security update according to Microsoft Bulletin MS14-048 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
Cms Pack 1.3 - Shell Upload
The cms-pack-cache WordPress plugin was affected by a Shell Upload security vulnerability...
CVE-2014-4947
Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...
CVE-2014-4948
CVE-2014-4948 affects Citrix XenServer 6.2 Service Pack 1 and earlier. The connected sources corroborate that this entry involves a vulnerability in XenServer that could lead to a denial of service and information disclosure by modifying the guest virtual hard disk (VHD). The Nessus/OpenVAS entri...
vCloud jobs are not shown in SCOM views of Backup jobs
Challenge In Backup Job views under SCOM Monitoring, all backup jobs are discovered by Veeam Management Pack for Veeam Backup except for vCloud vCD backup jobs. Cause The behavior is caused by a known issue and fixed in Veeam Management Pack v7. Solution Upgrade to most recent version. More...
JVN#80583739: Cybozu Garoon vulnerable to cross-site scritping
Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the function "Notices portlet", which may result in a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user that is logged on. Solution Update the...
AlstraSoft Live Support 1.21 - Admin Credential Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc2 echo Usage: php...
Microsoft NT 4.0 RAS/PPTP Malformed Control Packet Denial of Service Attack
No description provided by source. source: http://www.securityfocus.com/bid/2111/info Quoted from a Microsoft FAQ, Point-to-Point-Tunneling Protocol PPTP is a new networking technology that supports multiprotocol virtual private networks VPN, enabling remote users to access corporate networks...
PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow
No description provided by source. / Exploit Title: Plib + flightgear 3dconvert exploit Date: 08/10/2012 Author: Andres Gomez Software Links: Plib: http://plib.sourceforge.net/ flightgear: http://www.flightgear.org/ 3dconvert: ftp://ftp.ihg.uni-duisburg.de/FlightGear/Win32/old/3dconvert-win32.zip...
K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer DoS PoC
No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 vsfilter.dllVersion 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached Test7.flv file in Windows Explorer,causing...
IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...
MS SQL Server 2000,MS Jet 4.0 Engine Unicode Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5057/info Microsoft SQL Server is prone to a remotely exploitable unicode-based buffer overflow condition. This condition occurs when the OpenDataSource function is used with MS Jet Engine. This issue may be exploited to...