WordPress Podlove Podcast Publisher plugin versions 2.5.3 and below suffer from a remote SQL injection vulnerability.
7644c1e718ad96e70260bb88694784a8WordPress PressForward plugin versions 4.3.0 and below suffer from a cross site scripting vulnerability.
c1bc43011a404f94f827c88a862b2af5WordPress Easy Modal plugin versions 2.0.17 and below suffer multiple remote SQL injection vulnerabilities.
542c9307580448eb3f35d4186895bd12IBM Informix DB-Access utility is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. The vulnerability is triggered by providing an overly long file parameter value inside a LOAD statement, which is used to insert data from an operating-system file into an existing table or view. Version 12.10 is affected.
a6b494ac98eda0f50077d89e22e9c8cfIBM DB2 versions 9.7, 10.1, 10.5, and 11.1 suffer from a command line process buffer overflow vulnerability.
5d5fdc9afef069a12acc4631e4723b9aWordPress No External Links plugin versions 3.5.17 and below suffer from a cross site scripting vulnerability.
ee7fddf32f860d0d45b3a0bffdf6d2e6WordPress Tribulant Newsletters plugin versions 4.6.4.2 and below suffer from cross site scripting and file disclosure vulnerabilities.
b670de76da3bd53baa8500a2963d55cfWordPress Simple Slideshow Manager plugin versions 2.2 and below suffer from multiple cross site scripting vulnerabilities.
6cafb010fb20043a5898706c8f032a6dWordPress AffiliateWP plugin versions 2.0.8 and below suffer from a cross site scripting vulnerability.
c6a3f59b74239220d0fd9a314f2789bbWordPress Huge-IT Video Gallery plugin version 2.0.4 suffers from a remote SQL injection vulnerability.
7336919c380a0e84f16a4d0d5f7ce533WordPress All In One Schema.org Rich Snippets plugin versions 1.4.1 and below suffer from a cross site scripting vulnerability.
9483a5c6080370a01f53f222fa918972google-api-php-client versions 2.1.3 and below suffer from multiple cross site scripting vulnerabilities.
01570bb024997801f85e3290dadda5efWordPress User Access Manager plugin versions 1.2.14 and below suffer from a cross site scripting vulnerability.
4a21b4350764ab31170566267c4ac18bWordPress Tracking Code Manager plugin versions 1.11.1 and below suffer from cross site scripting and denial of service vulnerabilities.
d3ef28a36eeaf037536c1dd1e0a8b4b8WordPress WebDorado Gallery plugin versions 1.3.29 and below suffer from a remote SQL injection vulnerability.
0e0eefadee755b444571e29ec3efdbcfWordPress Spider Event Calendar plugin versions 1.5.49 and below suffer from a remote SQL injection vulnerability.
6173b28ce5d393ee0b49909e4b50ce45WordPress Facebook plugin versions 1.0.13 and below suffer from a remote SQL injection vulnerability.
48750895bceff41e1f56dec35cc34df9WordPress AccessPress Social Icons plugin versions 1.6.6 and below suffer from multiple remote SQL injection vulnerabilities.
9d14bcc50dc1e82357572a79e09e747eWordPress Ultimate Form Builder plugin suffers from a cross site scripting vulnerability.
b73d6d904bedc435f3d2dff13d9d57ebMagento versions 2.1.6 and below suffers from cross site request forgery and shell upload vulnerabilities.
7eac7c985713b9e6f32be4da1b6565bb53+ WordPress plugins by BestWebSoft suffer from cross site scripting and cross site request forgery vulnerabilities.
265031dbb6abada51eb891db78c25fcdWordPress Tribulant Slideshow Gallery plugin versions 1.6.4 and below suffer from multiple cross site scripting vulnerabilities.
5741ae5fa8e37ddb93b6ee5632cf37d8Apache Tomcat version 7.0.76 suffers from a directory traversal vulnerability.
1e538bcf61ae8964acad592471f749a1A few weeks ago, DefenseCode announced the remote pre-auth root access exploit for Cisco Linksys. During further research, they have discovered that other router manufacturers are also vulnerable to the same vulnerability, since the vulnerable Broadcom UPnP stack is used across multiple router vendors. Rapid7 has produced some scary numbers surrounding how many routers are affected on the Internet.
3b0a8f2514d231023a2e7212b1720304A critical security vulnerability that allows a remote unauthenticated attacker to remotely execute arbitrary code under root privileges has been discovered in Broadcom's UPnP software.
20f62f4fa05f9c94bab90345f785c0cf
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed