Results
7,228 of 17,305· Page 63/145The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
The wp-all-import plugin before 3.4.6 for WordPress has XSS.
The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=unins
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB
The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of
The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.
OX App Suite 7.10.0 to 7.10.2 allows XSS.
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead t
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other m
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in
An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in
Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to p
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable es
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrat
A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IM
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds wr
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by c
Test your stack for 2019issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.