Results
17,305· Page 139/347The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.
The gnucommerce plugin before 1.4.2 for WordPress has XSS.
The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulner
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download En
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.
The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a di
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different v
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CV
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.
The cforms2 plugin before 14.6.10 for WordPress has SQL injection.
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.
The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.
The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API te
A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log file
Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a se
Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AU
Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local use
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield
A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would all
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a low-privilege user to
A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remot
Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch Io
A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6
KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entry_id[0] parameter, the admin/index.php?m
Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability whe
A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an auth
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco
A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorize
A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco
A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director E
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Co
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote a
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut
A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, re
A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticat
A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allo
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all
Test your stack for 2019issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.