Naver Cloud Explorer Buffer Overflow Vulnerability

Naver is a South Korean Internet content service operator. A buffer overflow vulnerability exists in the NDrive1.2.2.sys file in Naver Cloud Explorer, which can be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...

CVE-2012-6719

The sharebar plugin before 1.2.2 for WordPress has SQL injection...

CVE-2018-20984

The patreon-connect plugin before 1.2.2 for WordPress has Object Injection...

GoPro gpmf-parser buffer overflow vulnerability (CNVD-2020-65282)

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in GPMFNext in the GPMFparser.c file in GoPro gpmf-parser version 1.2.2. The vulnerability stems from a networked system or product performing operations in...

GoPro gpmf-parser buffer overflow vulnerability

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in the GPMFNext of the GPMFparser.c file in GoPro gpmf-parser version 1.2.2, which can be exploited by an attacker to cause, among other things, a buffer overfl...

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

CVE-2019-1020003

invenio-records before 1.2.2 allows XSS...

PYSEC-2019-27

invenio-records before 1.2.2 allows XSS...

CVE-2019-1020003

invenio-records before 1.2.2 allows XSS...

WordPress Viral Quiz Maker - OnionBuzz plugin SQL injection vulnerability (CNVD-2019-27322)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Viral Quiz Maker - OnionBuzz plugin is one of the quiz plugins used in it. A SQL injection vulnerability exists in WordPress Viral Quiz...

CSZ CMS SQL Injection Vulnerability

CSZ CMS is a PHP-based open source content management system CMS. A SQL injection vulnerability exists in the core/MYSecurity.php file in CSZ CMS version 1.2.2 prior to 2019-06-20. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based application...

CVE-2019-13086

core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...

Harmis JE Messenger component path traversal vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Improper Access Control Vulnerability (CNVD-2019-14099)

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Component Access Control Error Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Harmis JE Messenger Cross-Site Scripting Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

CVE-2019-9922

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

PT-2019-19934 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: The issue allows for the execution of arbitrary SQL statements in the database due to a lack of input validation and improper query writing, making it susceptible to SQL...

PT-2019-19938 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: An issue allows Directory Traversal, which enables read access to arbitrary files. Recommendations: For Harmis JE Messenger component version 1.2.2, update to a version that...