116 matches found
WordPress 5.2.x < 5.2.15 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists via wpfilterglobalstylespost. - A prototype pollution exists via the Gutenberg wordpress/url package. Note that the...
WordPress 5.6.x < 5.6.5 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A data exposure vulnerability within the REST API. - A Lodash library prior to 4.17.21 vulnerbaility. Note that the scanner has not tested for these issues but has instead...
Safari < 14.1 Multiple Vulnerabilities
Binary data 701340.pasl...
WordPress 5.7.x < 5.7.1 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An XML External Entity XXE vulnerability exists in the media library affecting PHP 8. - A data exposure vulnerability exists in the REST API. Note that the scanner has not...
WordPress 5.1.x < 5.1.9 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An XML External Entity XXE vulnerability exists in the media library affecting PHP 8. - A data exposure vulnerability exists in the REST API. Note that the scanner has not...
Ninja Forms Plugin for WordPress < 3.4.34 Multiple Vulnerabilities
The WordPress Ninja Forms Plugin installed on the remote host is affected by multiple vulnerabilities : - An authenticated SendWP plugin installation and client secret key disclosure - An authenticated OAuth connection key disclosure - An open redirect - A Cross-Site Request Forgery CSRF to OAuth...
Apple iOS < 14.0 Multiple Vulnerabilities
Binary data appleios140check.nbin...
Discount Rules for WooCommerce Plugin for WordPress < 2.1.0 Multiple Vulnerabilities
The WordPress Discount Rules for WooCommerce Plugin installed on the remote host is affected by SQL injection and unauthenticated stored Cross-Site Scripting XSS vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Google Chrome < 84.0.4147.89 Multiple Vulnerabilities
Binary data 701281.pasl...
Apple iOS < 12.4.7 Multiple Vulnerabilities
Binary data appleios1247check.nbin...
Drupal 7.x < 7.66 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Several flaws exist in third-party Symfony PHP framework. - A flaw exists in third-party jQuery JavaScript library. Note that the scanner has not tested for these issues but...
Apple iOS < 11.2 Multiple Vulnerabilities (APPLE-SA-2017-12-13-6)
Binary data 700544.prm...
macOS 10.13.x < 10.13.5 Multiple Vulnerabilities
Binary data 700516.prm...
macOS 10.13.x < 10.13.3 Multiple Vulnerabilities
Binary data 700514.prm...
macOS 10.14.x < 10.14.4 Multiple Vulnerabilities
Binary data 700522.prm...
Joomla! 3.4.x < 3.8.9 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Local file inclusion with PHP 5.3 affects Joomla 2.5.0 through 3.8.8 - XSS vulnerability in language switcher module affects Joomla 1.6.0 through 3.8.8 Note that the scanner...
Joomla! 3.7.x < 3.8.2 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by an authentication bypass and multiple information disclosure vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
WordPress 3.7.x < 3.7.26 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Localhost is treated as same host by default. - Unsafe redirects are used when redirecting the login page if SSL is forced. - The version string is not correctly escaped f...
Nginx < 1.8.1 Multiple Vulnerabilities
According to the self-reported version in its response header, the version of nginx hosted on the remote web server is less than 1.8.1 or 1.9.x prior to 1.9.10. It is, therefore, affected by multiple vulnerabilities as noted in the vendor advisory. Note that the scanner has not tested for these...