7173 matches found
SCOM console crashes when opening widget personalization dialog
Challenge When opening the Personalization dialog for any State View widget, the widget appears empty, and the Operations Manager Console crashes Cause There is a specific new widget declaration which can cause issues while loading other widgets. Solution Download Veeam Widget Library MP 7.0.0.18...
ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS
The Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites WordPress plugin was affected by a Live Chat Widget Multiple Field XSS security vulnerability...
AB Categories Search Widget 0.1 - s Parameter Reflected XSS
The AB Categories Search Widget WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...
Wise Search Widget 1.1 - s Parameter Reflected XSS
The Category Wise Search WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...
Dropdown Menu Widget 1.9.1 - Script Insertion CSRF
The Dropdown Menu Widget WordPress plugin was affected by a Script Insertion CSRF security vulnerability...
ADIF Log Search Widget - Cross-Site Scripting (XSS)
The ADIF Log Search Widget WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection
The Social Media Widget WordPress plugin was affected by a social-widget.php MITM Weakness Arbitrary Code Injection security vulnerability...
Mini Mail Dashboard Widget 1.36 - wp-mini-mail.php abspath Parameter Remote File Inclusion
The mini-mail-dashboard-widget WordPress plugin was affected by a wp-mini-mail.php abspath Parameter Remote File Inclusion security vulnerability...
jQuery Mega Menu 1.0 - Local File Inclusion
The JQuery Mega Menu Widget WordPress plugin was affected by a Local File Inclusion security vulnerability...
Advanced Text Widget <= 2.0.0 - Cross Site Scripting
The Advanced Text Widget WordPress plugin was affected by a Cross Site Scripting security vulnerability...
Rich Widget - File Upload
The rich-widget WordPress plugin was affected by a File Upload security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
WordPress Widget Control Powered Plugin <= 1.0.1 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php idDropdown parameter. Solution Update the plugin...
WordPress Flash Player Widget Plugin - Content Spoofing
This plugin is prone to a content spoofing vulnerability in dewplayer.swf. Solution Update the plugin...
Code injection
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property...
yii -- Remote arbitrary PHP code execution
Yii PHP Framework developers report: We are releasing Yii 1.1.15 to fix a security issue found in 1.1.14. We urge all 1.1.14 users to upgrade their Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected. Upgrading to this release from 1.1.14 is...
CVE-2014-4687
Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...
CVE-2014-4516
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
