169 matches found
WordPress Google Forms 0.84 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Google Forms WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress Top 10 Popular Posts 2.3.0 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Top 10 - Popular posts plugin for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress Profile Builder 2.4.0 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress WP Fastest Cache 0.8.5.9 Local File Inclusion
------------------------------------------------------------------------ WP Fastest Cache Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...
Threat Outbreak Alert RuleID22983: Email Messages Distributing Malicious Software on May 22, 2016
Medium Alert ID: 46341 First Published: 2016 May 23 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22983 may contain the following files: Name | Size...
Summer Games 3D Lite - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Summer Games 3D Lite published at the 'play' market has multiple vulnerabilities...
Athletics2: Summer Sports Free - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Athletics2: Summer Sports Free published at the 'play' market has multiple vulnerabilities...
My Summer Date - Style Me Up - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application My Summer Date - Style Me Up published at the 'play' market has multiple vulnerabilities...
Summer Story - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Summer Story published at the 'play' market has multiple vulnerabilities...
Summer - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Summer published at the 'play' market has multiple vulnerabilities...
[SECURITY] Fedora 22 Update: php-udan11-sql-parser-3.4.0-1.fc22
A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. To use this library, you just have to add, in your project: requireonce '/usr/share/php/SqlParser/autoload.php';...
[SECURITY] Fedora 23 Update: php-udan11-sql-parser-3.4.0-1.fc23
A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. To use this library, you just have to add, in your project: requireonce '/usr/share/php/SqlParser/autoload.php';...
CVE-2014-8471
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors...
CVE-2014-8473
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8474
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8473
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8472
CVE-2014-8472 affects CA Cloud Service Management prior to the Summer 2014 upgrade, where authentication tokens from an Identity Provider were not properly verified. This allowed a user-assisted remote attacker to bypass access restrictions via unspecified vectors. The issue was addressed in the ...
CVE-2014-8474
CA Cloud Service Management (CSM) prior to the Summer 2014 upgrade is affected by CVE-2014-8474, an XML External Entity (XXE) vulnerability. An attacker could exploit an XML document containing an external entity declaration and an entity reference to read arbitrary files, launch requests to intr...