12409 matches found
Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system v5.4 flagship version of the existence of file upload vulnerability
Shop7z online shopping system is a domestic ASP online store platform software. Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system v5.4 flagship version of the existence of file upload vulnerability, an attacker can be exploited to obtain server control...
DEBIAN-CVE-2020-10766
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced...
CVE-2020-25379
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer' parameter which allows an authenticated attacker to inject a malicious SQL query...
CVE-2020-25380
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting XSS via the 'Recall Settings' field in admin.php. An attacker can inject JavaScript code that will be stored and executed...
Cross site scripting
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting XSS via the 'Recall Settings' field in admin.php. An attacker can inject JavaScript code that will be stored and executed...
CVE-2020-25380
CVE-2020-25380 affects WordPress Plugin Store / Mike Rooijackers Recall Products V0.8. The vulnerability is a stored Cross Site Scripting (XSS) via the Recall Settings field in admin.php, allowing injected JavaScript to execute in the context of authenticated/admin users. Impact details are limit...
CVE-2020-25379
CVE-2020-25379 affects the WordPress Recall Products plugin (version
CVE-2020-25379
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer' parameter which allows an authenticated attacker to inject a malicious SQL query...
CVE-2020-25378
Wordpress Plugin Store / AccessPress Themes WP Floating Menu V1.3.0 is affected by: Cross Site Scripting XSS via the id GET parameter...
CVE-2020-25378
Summary (grounded): CVE-2020-25378 affects WordPress plugins from AccessPress Themes: WP Floating Menu, version 1.3.0. The vulnerability is a Cross Site Scripting (XSS) weakness triggered by the id parameter in the GET request (reflected XSS). Some sources describe the issue as authenticated and ...
CVE-2020-25375
WP SMART CRM (SoftradeWeb SNC) version 1.8.7 is affected by stored Cross Site Scripting via multiple customer fields (Business Name, Tax Code, First Name, Address, Town, Phone, Mobile, Place of Birth, Web Site, VAT Number, Last Name, Fax, Email, Skype). Root cause: inadequate input sanitization i...
PT-2020-16074 · Mike Rooijackers · Recall Products
Name of the Vulnerable Software and Affected Versions: Wordpress Plugin Store / Mike Rooijackers Recall Products version 0.8 Description: The issue allows an authenticated attacker to inject a malicious SQL query due to the failure to sanitize input from the Manufacturer parameter. Recommendation...
CVE-2020-1146
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1146
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-0766
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-0766
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
Privilege escalation
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
Privilege escalation
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1146
CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...