Lucene search
+L

13828 matches found

Patchstack
Patchstack
added 2014/08/01 12:00 a.m.11 views

WordPress Manage Calameo Publications Plugin <= 1.1.0 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in thickboxcontent.php attachmentid parameter. Solution Update the plugin...

2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.16 views

WordPress GroupDocs Viewer Plugin <= 1.4.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in options.php and grpdocs-dialog.php. Solution Update the plugin...

2AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.11 views

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - Stored XSS

This plugin is prone to a playlist/addplaylist.php multiple parameter stored cross site scripting vulnerability. Solution Update the plugin...

2AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.8 views

WordPress JournalCrunch Theme - Email Spoofing

Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...

3.4AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.13 views

WordPress BSK PDF Manager Plugin <= 1.3 - Cross Site Scripting

This plugin is prone to a cross site scripting in wp-admin/admin.php multiple parameter. Solution Upgrade the plugin...

1.9AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.4 views

WordPress Digital Farm Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

5.5AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.14 views

WordPress Rezo - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Rezo theme. Solution Update the theme...

2.5AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.14 views

WordPress Church Admin Plugin <= 0.33.4.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in includes/validate.php id parameter. Solution Update the plugin...

1.9AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.13 views

WordPress Simple Forum Plugin - File Upload

This plugin is prone to a remote file upload vulnerability. Solution Update the plugin...

2.8AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.8 views

WordPress Photobox Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Photobox theme. Solution Update the theme...

2.5AI score
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2014/08/01 12:00 a.m.45 views

Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

6.8CVSS6.1AI score0.01343EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.13 views

WordPress Appius Theme - Arbitrary File Upload

This theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the theme...

3.6AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.8 views

WordPress Magnitudo Theme - Arbitrary File Upload

WordPress Magnitudo theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the theme...

3.5AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.13 views

WordPress Affiliate Manager Plugin - Cross Site Scripting

This plugin is prone to a login.php msg parameter XSS. Solution Update the plugin...

2.7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.8 views

WordPress Boldy Theme - Email Spoofing

Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...

3.6AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2014/07/31 2:55 p.m.26 views

CVE-2014-5175

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

7.5CVSS7AI score0.01956EPSS
SaveExploits0References7
Prion
Prion
added 2014/07/31 2:55 p.m.20 views

Authentication flaw

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

7.5CVSS7.5AI score0.01956EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2014/07/31 2:00 p.m.30 views

CVE-2014-5175

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

7AI score0.01956EPSS
SaveExploits0References7
CVE
CVE
added 2014/07/31 2:00 p.m.60 views

CVE-2014-5175

CVE-2014-5175 affects SAP Solution Manager 7.1, specifically the License Measurement servlet, where remote attackers may bypass authentication via unspecified vectors related to a verb tampering attack and SAP_JTECHS. The available sources identify the affected product and the attack class but do...

7.5CVSS7.2AI score0.01956EPSS
SaveExploits0References7Affected Software1
OpenVAS
OpenVAS
added 2014/07/30 12:00 a.m.49 views

Debian: Security Advisory (DSA-2994-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.04664EPSS
SaveExploits3References3
Rows per page
Query Builder