EUVD-2009-1979

Malware in sbrugna...

WordPress Newsletter plugin < 8.8.2 - Admin+ Stored XSS via Subscription vulnerability

Admin+ Stored XSS via Subscription vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin NewsLetter versions 8.8.2...

WordPress Mobile Contact Bar plugin < 3.0.5 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Mobile Contact Bar versions 3.0.5...

Code injection

Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator...

CVE-2009-1984

CVE-2009-1984 affects Oracle E‑Business Suite (EBS) Application Install in releases 11.5.10.2, 12.0.6, and 12.1. The vulnerability is local and can impact confidentiality, integrity, and availability via vectors related to the Patch Administrator. The Oracle July 2009 Critical Patch Update fixes ...