8560 matches found
CVE-2014-7501
The Translation Widget aka com.wTranslationGadget application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Translation Widget aka com.wTranslationGadget application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7501
The Translation Widget (com.wTranslationGadget) for Android, version 0.1, does not verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and obtain sensitive information via a crafted certificate. According to the CVE-2014-7501 entry, the impact includes partial confi...
CVE-2014-7501: Undefined Security Weakness
The Translation Widget aka com.wTranslationGadget application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7049
The CVE-2014-7049 entry concerns the SomTodo (com.somcloud.somtodo) Android app version 2.0.3, which does not verify X.509 certificates from SSL servers. This trust weakness allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability a...
CVE-2014-7049: Undefined Security Weakness
The SomTodo - Task/To-do widget aka com.somcloud.somtodo application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6312
Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...
CVE-2014-6312
Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...
CVE-2014-6312
CVE-2014-6312: A CSRF vulnerability in the WordPress plugin Login Widget With Shortcode (login-sidebar-widget) prior to version 3.2.1 allows remote attackers to hijack administrator sessions and perform XSS via the custom_style_afo parameter on the login_widget_afo page leading to wp-admin/option...
CVE-2014-6312
Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...
CVE-2014-6312: Improper Neutralization of Input During Web Page Generation
Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...
PT-2014-7146
Name of the Vulnerable Software and Affected Versions Login Widget With Shortcode login-sidebar-widget plugin versions prior to 3.2.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site...
chromium: multiple security fixes in Chrome 38.0.2125.101
Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree,...
Design/Logic Flaw
Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree,...
UBUNTU-CVE-2014-3191
Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree,...
PYSEC-2014-46
Cross-site scripting XSS vulnerability in widgettraversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
[SECURITY] Fedora 20 Update: baloo-widgets-4.14.1-1.fc20
Widgets for Baloo...
WordPress Login Widget With Shortcode Plugin 3.1.1 - Multiple Vulnerabilities
Login Widget With Shortcode plugin is prone to CSRF and XSS vulnerabilities that allow an attacker to insert arbitrary HTML into an admin page. Then an attacker can use Javascript to control an admin user’s browser and create user accounts, posts, etc. Solution Update the plugin...
WordPress Plugin Login Widget With ShortCode 3.1.1 - Multiple Vulnerabilities
Details ================ Software: Login Widget With Shortcode Version: 3.1.1 Homepage: http://wordpress.org/plugins/login-sidebar-widget/ Advisory report:...