675 matches found
WordPress Disable Comments Plugin < 1.0.4 CSRF Vulnerability
The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
UBUNTU-CVE-2017-10965
An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer...
Pixie cross-site scripting vulnerability (CNVD-2017-04818)
Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...
Pixie cross-site scripting vulnerability (CNVD-2017-04816)
Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...
Pixie cross-site scripting vulnerability (CNVD-2017-04894)
Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...
Foswiki 1.0.x < 1.0.5 CSRF Vulnerability
Foswiki is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Fedora 25 : cacti (2017-8b0737b093)
Update to 1.0.4 Release notes : http://www.cacti.net/releasenotes100.php http://www.cacti.net/releasenotes101.php http://www.cacti.net/releasenotes102.php http://www.cacti.net/releasenotes103.php http://www.cacti.net/releasenotes104.php Note that Tenable Network Security has extracted the...
guesser, 1.0.4
guesser by bitsgeo.com, 1.0.4, SQL Injection...
CVE-2016-1000120
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...
CVE-2016-1000119
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...
CVE-2016-1000147
Reflected XSS in wordpress plugin recipes-writer v1.0.4...
Huge-IT Slideshow SQL Injection Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /models/slideshow.php file contains a SQL injection vulnerability. An attacker can exploit this vulnerability ...
HarfBuzz Denial of Service Vulnerability
HarfBuzz is a text engine for OpenType fonts. A security vulnerability exists in the hb-ot-layout-gpos-table.hh file in HarfBuzz 1.0.4 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with specially crafted data...
CSRF Vulnerability
Overview Versions 1.0.3 and earlier of jquery-ujs are vulnerable to an information leakage attack that may enable attackers to launch CSRF attacks, as it allows attackers to send CSRF tokens to external domains. When an attacker controls the href attribute of an anchor tag, or the action attribut...
NewStatPress <= 1.0.4 - Reflected Cross-Site Scripting (XSS)
The NewStatPress plugin utilizes on lines 28 and 31 of the file ‘includes/nspsearch.php’ several variables from the $GET scope, without sanitation. While WordPress automatically escapes quotes on this scope, the outputs on these lines are outside of quotes, and as such can be utilized to trigger ...
Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xdm package up to version 1.0.4-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality of protected information.
The vulnerability of the Subversion package up to version 1.0.4-r1 inclusive of the Gentoo Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...
Betster SQL Injection Vulnerability
Betster aka PHP Betoffice is a suite of software for creating online casinos based on PHP, MySQL and JavaScript. A SQL injection vulnerability exists in Betster version 1.0.4, which stems from the failure of the showprofile.php or categoryedit.php scripts to adequately filter the 'id' parameter;...
Uapplication Ublog 1.0.x Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12931/info Ublog is affected by a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of...