8768 matches found
WordPress plugin Quizlord cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Quizlord plugin is used in one of the plugin in the site to add testing capabilities. A cross-site scripting...
ASP4CMS AspCMS Elevation of Privilege Vulnerability
ASP4CMS AspCMS is China's ASP4CMS open source laboratory of a free enterprise website construction system . The system supports customized templates and plug-in extensions and other features. ASP4CMS AspCMS 2.5.6 version of a security vulnerability , the vulnerability stems from the /member/reg.a...
soundtouch Buffer Overflow Vulnerability
Soundtouch is an open-source audio processing library for changing the speed, pitch, and playback rate of an audio stream, among other things. A buffer overflow vulnerability exists in the 'WavInFile::readHeaderBlock' function in the SoundStretch/WavFile.cpp file in Soundtouch 2.0.0 and earlier...
Kraftway 24F2XG Router Information Disclosure Vulnerability
The Kraftway 24F2XG Router is a wireless router product from the Russian company Kraftway. A security vulnerability exists in the Kraftway 24F2XG Router using firmware version 3.5.30.1118, which originates from the program's use of SSLv2 and SSLv3. A remote attacker could use this vulnerability t...
UBUNTU-CVE-2018-15594
arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests...
ALPINE-CVE-2018-15469
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG...
CVE-2018-15355
Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118...
Pulp Arbitrary File Overwrite Vulnerability
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. An arbitrary file overwrite vulnerability exists in Pulp version 2.16.x. The vulnerability stems from the program failing to properly resolve paths a...
CVE-2018-10917
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...
PHP Scripts Mall Chartered Accountant:Auditor Website Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Chartered Accountant:Auditor Website is a financial auditing website system script by PHP Scripts Mall India. The system includes features such as profile management, feedback management, order management and document upload management. A cross-site request forgery vulnerability...
SQL Injection Vulnerability in nucms v2.2
NUCMS is a content management system based on PHP+MYSQL technology developed by Liaocheng Leadsun Network Technology Co. NUCMS v2.2 has a SQL injection vulnerability that can be exploited by attackers to obtain database information...
PHP Scripts Mall hotel-booking-script Denial of Service Vulnerability
PHP Scripts Mall hotel-booking-script is a hotel booking system script by PHP Scripts Mall India, which includes features like advanced CMS management, review management and booking management. A denial of service vulnerability exists in PHP Scripts Mall hotel-booking-script version 2.0.4, which...
SQL Injection Vulnerability in nucms v2.2
nucms is a content management system based on PHP+MYSQL technology developed by Liaocheng Leadsun Network Technology Co. nucms v2.2 has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
PT-2018-10192
Name of the Vulnerable Software and Affected Versions cobbler versions 2.6.x Description A flaw was discovered in cobbler where its CobblerXMLRPCInterface class exposes all functions over XMLRPC, allowing a remote, unauthenticated attacker to gain high privileges within cobbler and upload files t...
AuraCMS Cross-Site Scripting Vulnerability
AuraCMS is a content management system based on PHP and MySQL. The system is characterized by simplicity and modularity. A cross-site scripting vulnerability exists in AuraCMS version 2.3. A remote attacker can inject arbitrary web scripts by adding a Guestbook to exploit the vulnerability...
CloudBees Jenkins TraceTronic ECU-TEST Plugin Server-Side Request Forgery Vulnerability
CloudBees Jenkins is a suite of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor ongoing software releases/testing projects and some timed tasks.TraceTronic ECU-TEST Plugin is an automated test software for embedded systems that uses... TraceTronic ECU-TEST...
rejucms cross-site scripting vulnerability
rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1. A remote attacker can inject arbitrary web script or HTML by sending the 'content' parameter to the admin/book.php URL...
IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2018-18106)
IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterlin...
PT-2018-12812 · My Little Forum · My Little Forum
Name of the Vulnerable Software and Affected Versions: my little forum version 2.4.12 Description: The issue allows for XSS via the Menu Link field in the Add page option. Recommendations: For my little forum version 2.4.12, consider restricting access to the Add page option until a fix is...