5311 matches found
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27688)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
NewStart CGSL CORE 5.04 / MAIN 5.04 : gnupg2 Vulnerability (NS-SA-2019-0023)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gnupg2 packages installed that are affected by a vulnerability: - A data validation flaw was found in the way gnupg processes file names during decryption and signature validation. An attacker may be able to inject messages...
PT-2019-13876 · Pdfresurrect +2 · Pdfresurrect +2
Name of the Vulnerable Software and Affected Versions: PDFResurrect versions prior to 0.18 Description: An issue was discovered in PDFResurrect where the pdf load pages kids function in pdf.c does not validate a certain size value. This leads to a malloc failure and an out-of-bounds write...
cPanel cross-site scripting vulnerability (CNVD-2019-26210)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 66.0.2. The vulnerability stems from a lack of proper...
Sitecore cross-site scripting vulnerability (CNVD-2019-26203)
Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A cross-site scripting vulnerability exists in Sitecore CMS 9.0.1 and prior versions. The...
cPanel cross-site scripting vulnerability (CNVD-2019-26357)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Feature Manager interface in versions prior to cPanel 11.54.0.4...
The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway interface of the PAN-OS operating system allows a perpetrator to execute arbitrary code by sending a specially crafted request to the vulnerable device.
The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway interface of the PAN-OS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code by sending a specially crafted request to...
The vulnerability of the BGP protocol implementation in the JunOS operating system allows a attacker to cause a service failure.
The vulnerability of the BGP protocol implementation in the JunOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by performing a certain sequence of BGP session restarts...
CVE-2019-7615
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'servercacert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the...
CVE-2019-7615
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'servercacert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the...
The vulnerability of the Fast Transition function in the implementation of the 802.11r protocol of Cisco IOS Access Points allows a attacker to cause service interruptions.
The vulnerability of the Fast Transition function in the 802.11r portlet implementation of Cisco IOS Access Points is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted replay events...
GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24242)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...
LayerBB cross-site scripting vulnerability (CNVD-2019-24206)
LayerBB is a small set of forum software. A cross-site scripting vulnerability exists in LayerBB version 1.1.3. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...
CVE-2019-1010234
The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is:...
CVE-2019-1010245
The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The...
PT-2019-2796
Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1.18 and earlier PAN-OS versions 8.0.11-h1 and earlier PAN-OS versions 8.1.2 and earlier Description The issue exists due to insufficient input validation in the GlobalProtect portal and GlobalProtect Gateway interface of the...
CVE-2019-1941
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the...
CVE-2019-1941 Cisco Identity Services Engine Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the...
