280 matches found
Sql injection
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...
Sql injection
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...
CVE-2015-9445
CVE-2015-9445 affects the WordPress plugin ** Unite Gallery Lite** (before version 1.5). The issue is a combination of CSRF and SQL injection via wp-admin/admin-ajax.php in the operation unitegallery_ajax_action . This vulnerability is reported with a high impact (NVD CVSS v3.1 base score 8.8) an...
CVE-2015-9446
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...
CVE-2015-9446
CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...
CVE-2015-9447
The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...
CVE-2015-9447
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...
poppler: stack consumption in function Dict::find() in Dict.cc
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...
The vulnerability of the Intel Unite Client conference communication software arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.
The software for Intel Unite Conference Calling has a vulnerability due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the Intel Unite Client for Android conference communication software relates to deficiencies in access control, allowing attackers to escalate their privileges.
The vulnerability of the Intel Unite Client for Android conference software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Intel Unite Client Vulnerability - Lenovo Support US
No description provided...
Intel Unite Client Vulnerability - US
Lenovo Security Advisory: LEN-27709 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0132 Summary Description: A potential security vulnerability in Intel Unite Client may allow denial of service. Mitigation Strategy for Customers what y...
Intel Unite Client Input Validation Error Vulnerability
Intel UniteR Client is a conferencing client from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 3.3.176.13. An attacker could exploit this vulnerability to cause a denial of service data corruption...
Intel Unite Client Elevation of Privilege Vulnerability
Intel UniteR Client is a conferencing client from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 4.0. An attacker could exploit the vulnerability to elevate privileges...
CVE-2019-0172
A logic issue in Intel UniteR Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access...
CVE-2019-0172
A logic issue in Intel UniteR Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access...
CVE-2019-0132
Data Corruption in Intel UniteR Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access...
CVE-2019-0132
Data Corruption in Intel UniteR Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access...
Design/Logic Flaw
Data Corruption in Intel UniteR Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access...
CVE-2019-0172
Intel’s CVE-2019-0172 affects Intel Unite Client for Android before version 4.0, introducing a logic issue that could allow privilege escalation over a network. Intel’s advisory confirms the vulnerability and recommends updating to version 4.0 or later; CVSS3.0 details in the advisory indicate a ...