Alfresco Software Alfresco application for Android SQL Injection Vulnerability

Alfresco Software Alfresco application for Android is an application for accessing Alfresco on the Android platform from Alfresco Software, USA. An SQL injection vulnerability exists in the HistorySearchProvider.java file in versions of the Alfresco Software Alfresco application for Android...

CVE-2019-15645

The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...

openITCOCKPIT Code Injection Vulnerability

openITCOCKPIT is a set of open source system monitoring tools . A code injection vulnerability exists in versions of openITCOCKPIT prior to 3.7.1. The vulnerability arises from external input data to construct code segments in the process , the network system or product is not properly filtered f...

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2020-20392)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 versions prior to 5.3.2.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter...

CVE-2019-8447

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery CSRF vulnerability...

CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal...

CVE-2018-20980

The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...

CVE-2016-10918

The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

CVE-2017-18559

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...

CVE-2012-6714

The count-per-day plugin before 3.2.3 for WordPress has XSS via search words...

CVE-2016-10896

The seo-redirection plugin before 4.3 for WordPress has stored XSS...

CVE-2016-10899

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...

Clam AntiVirus Denial of Service Vulnerability

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A denial of service vulnerability exists in ClamAV versions prior to 0.101.3, which can be exploited by attackers to cause ...

CVE-2017-18541

The xo-security plugin before 1.5.3 for WordPress has XSS...

CVE-2017-18542

The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18548

The note-press plugin before 0.1.2 for WordPress has SQL injection...

PT-2019-13436 · Impress · Give

Name of the Vulnerable Software and Affected Versions: Impress GiveWP Give plugin versions prior to 2.5.1 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the includes/payments/class-payments-query.php file...

CVE-2016-10883

The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users...

WordPress simple-membership plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-membership plugin is a website membership plugin used in it. Cross-site scripting vulnerability exists in WordPress...