Security
Headlines
HeadlinesLatestCVEs

Tag

#php

CVE-2015-9298: Events Manager

The events-manager plugin before 5.6 for WordPress has code injection.

CVE
#sql#xss#csrf#vulnerability#web#ios#windows#apple#google#js#git#java#wordpress#php#perl#pdf#oauth#auth#firefox#sap#ssl
CVE-2019-14433: security - [OSSA-2019-003] Nova Server Resource Faults Leak External Exception Details (CVE-2019-14433)

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

CVE-2019-14787: Newsletters

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.

CVE-2019-14683: Import and export users and customers

The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.