GoPro gpmf-parser buffer overflow vulnerability (CNVD-2020-65282)

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in GPMFNext in the GPMFparser.c file in GoPro gpmf-parser version 1.2.2. The vulnerability stems from a networked system or product performing operations in...

GoPro gpmf-parser buffer overflow vulnerability

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in the GPMFNext of the GPMFparser.c file in GoPro gpmf-parser version 1.2.2, which can be exploited by an attacker to cause, among other things, a buffer overfl...

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

CVE-2019-1020003

invenio-records before 1.2.2 allows XSS...

PYSEC-2019-27

invenio-records before 1.2.2 allows XSS...

CVE-2019-1020003

invenio-records before 1.2.2 allows XSS...

WordPress Viral Quiz Maker - OnionBuzz plugin SQL injection vulnerability (CNVD-2019-27322)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Viral Quiz Maker - OnionBuzz plugin is one of the quiz plugins used in it. A SQL injection vulnerability exists in WordPress Viral Quiz...

CSZ CMS SQL Injection Vulnerability

CSZ CMS is a PHP-based open source content management system CMS. A SQL injection vulnerability exists in the core/MYSecurity.php file in CSZ CMS version 1.2.2 prior to 2019-06-20. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based application...

CVE-2019-13086

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...

Harmis JE Messenger Cross-Site Scripting Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Improper Access Control Vulnerability (CNVD-2019-14099)

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger component path traversal vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Component Access Control Error Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

CVE-2019-9922

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

PT-2019-19936 · Harmis · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue was discovered in the Harmis JE Messenger component for Joomla!, allowing an action to be performed within the context of another user's account. Recommendations: For version...

PT-2019-19938 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: An issue allows Directory Traversal, which enables read access to arbitrary files. Recommendations: For Harmis JE Messenger component version 1.2.2, update to a version that...

PT-2019-19934 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: The issue allows for the execution of arbitrary SQL statements in the database due to a lack of input validation and improper query writing, making it susceptible to SQL...

PT-2019-19937 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue in the Harmis JE Messenger component for Joomla allows reading information that should only be accessible by a different user. Recommendations: For version 1.2.2, update to a...

Apache Storm < 1.1.3 / 1.2.x < 1.2.2 arbitrary file write vulnerability

The version of Apache Storm running on the remote host is prior to 1.1.3 or 1.2.x prior to 1.2.2. It is, therefore, affected by an arbitrary file write vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid122487; scriptversion"1.3"; scriptcvsdate"Date:...