Lucene search
+L

2834 matches found

OSV
OSV
added 2014/08/18 11:15 a.m.9 views

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

5.2AI score
SaveExploits0References5
OSV
OSV
added 2014/08/18 11:15 a.m.6 views

DEBIAN-CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

2.1CVSS5.6AI score0.02196EPSS
SaveExploits0References1
Prion
Prion
added 2014/08/18 11:15 a.m.27 views

Cross site scripting

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

2.1CVSS5.7AI score0.02196EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2014/08/18 11:15 a.m.34 views

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

2.1CVSS6AI score0.02196EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2014/08/18 10:0 a.m.38 views

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

5.1AI score0.02196EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2014/08/18 10:0 a.m.61 views

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

2.1CVSS3.9AI score0.02196EPSS
SaveExploits0
Patchstack
Patchstack
added 2014/08/14 12:0 a.m.23 views

WordPress <= 3.9.1 - XSS

This vulnerability is in the wp-includes/pluggable.php. It allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL. Solution Update WordPress...

2.1CVSS4.2AI score0.02196EPSS
SaveExploits0References1Affected Software1
zdt
zdt
added 2014/08/13 12:0 a.m.26 views

GEL CMS 4.0 SQL Injection Vulnerability

GEL CMS version 4.0 suffers from a remote SQL injection vulnerability that allows for login bypass. ad8888888888ba Bypass super-Admin GEL4.0 dP' "8b, 8 ,aaa, "Y888a ,aaaa, ,aaa, ,aa, 8 8' 8 "8baaaad""""baaaad""""baad""8b 8 8 8 """" """" "" 8b 8 8, ,8 ,aaaaaaaaaaaaaaaaaaaaaaaaddddd88P 8 """' ,d8""...

8.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/08/12 12:0 a.m.21 views

GEL CMS 4.0 SQL Injection

ad8888888888ba Bypass super-Admin GEL4.0 dP' "8b, 8 ,aaa, "Y888a ,aaaa, ,aaa, ,aa, 8 8' 8 "8baaaad""""baaaad""""baad""8b 8 8 8 """" """" "" 8b 8 8, ,8 ,aaaaaaaaaaaaaaaaaaaaaaaaddddd88P 8 """' ,d8"" Yb, ,ad8" "Y8888888888P" Exploit Title: SQLi Bypass super-admin GEL CMS 4.0 Google Dork:...

0.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2014/08/11 4:54 p.m.15 views

OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

9.3CVSS7.4AI score0.05577EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2014/08/11 4:44 p.m.11 views

OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

9.3CVSS7.4AI score0.05577EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2014/08/07 9:24 p.m.6 views

OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

9.3CVSS7.4AI score0.05577EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.21 views

WP Super Cache 1.3 - trunk/plugins/badbehaviour.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/badbehaviour.php URI XSS security vulnerability...

4.3CVSS1.6AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.25 views

WP Super Cache 1.3 - trunk/plugins/domain-mapping.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/domain-mapping.php URI XSS security vulnerability...

4.3CVSS1.6AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.23 views

WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/awaitingmoderation.php URI XSS security vulnerability...

4.3CVSS1.6AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.60 views

WP Super Cache 1.3 - trunk/wp-cache.php wp_nonce_url Function URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/wp-cache.php wpnonceurl Function URI XSS security vulnerability...

4.3CVSS2AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.59 views

WP Super Cache 1.3 - trunk/plugins/wptouch.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/wptouch.php URI XSS security vulnerability...

4.3CVSS1.6AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.19 views

WP Super Cache 1.3 - trunk/plugins/searchengine.php URI XSS

The WP Super Cache WordPress plugin was affected by a trunk/plugins/searchengine.php URI XSS security vulnerability...

4.3CVSS1.6AI score0.01523EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.7 views

Monsters Editor - Arbitrary File Upload

The Monsters Editor for WP Super Edit WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

3.4AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 12:0 a.m.17 views

WP-Super-Cache 1.3 - Remote Code Execution

The WP Super Cache WordPress plugin was affected by a Remote Code Execution security vulnerability...

6.8CVSS2.6AI score0.12985EPSS
SaveExploits3References3Affected Software1
Rows per page
Query Builder