Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18532 State: PUBLISHED Published: 2019-08-20T15:50:24 Last Updated: 2024-08-05T21:28:55.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The realty plugin before 1.1.0 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/realty/#developers
CVE ID: CVE-2017-18533 State: PUBLISHED Published: 2019-08-20T15:52:00 Last Updated: 2024-08-05T21:28:54.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rimons-twitter-widget plugin before 1.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/rimons-twitter-widget/#developers
CVE ID: CVE-2017-18534 State: PUBLISHED Published: 2019-08-21T11:47:47 Last Updated: 2024-08-05T21:28:54.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/share-on-diaspora/#developers
CVE ID: CVE-2017-18535 State: PUBLISHED Published: 2019-08-21T18:15:11 Last Updated: 2024-08-05T21:28:54.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smokesignal plugin before 1.2.7 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/smokesignal/#developers
CVE ID: CVE-2017-18536 State: PUBLISHED Published: 2019-08-21T11:40:37 Last Updated: 2024-08-05T21:28:54.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/stop-user-enumeration/#developers
CVE ID: CVE-2017-18537 State: PUBLISHED Published: 2019-08-21T11:55:02 Last Updated: 2024-08-05T21:28:55.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/visitors-online/#developers
CVE ID: CVE-2017-18538 State: PUBLISHED Published: 2019-08-21T11:56:13 Last Updated: 2024-08-05T21:28:55.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/weblibrarian/#developers - https://wpvulndb.com/vulnerabilities/9723
CVE ID: CVE-2017-18539 State: PUBLISHED Published: 2019-08-21T11:57:30 Last Updated: 2024-08-05T21:28:54.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/weblibrarian/#developers - https://wpvulndb.com/vulnerabilities/9724
CVE ID: CVE-2017-18540 State: PUBLISHED Published: 2019-08-21T11:59:06 Last Updated: 2024-08-05T21:28:55.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/weblibrarian/#developers - https://wpvulndb.com/vulnerabilities/9725
CVE ID: CVE-2017-18541 State: PUBLISHED Published: 2019-08-16T20:23:02 Last Updated: 2024-08-05T21:28:55.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xo-security plugin before 1.5.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/xo-security/#developers
CVE ID: CVE-2017-18542 State: PUBLISHED Published: 2019-08-16T20:22:32 Last Updated: 2024-08-05T21:28:55.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/zendesk-help-center/#developers
CVE ID: CVE-2017-18543 State: PUBLISHED Published: 2019-08-16T20:17:56 Last Updated: 2024-08-05T21:28:55.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/invite-anyone/#developers
CVE ID: CVE-2017-18544 State: PUBLISHED Published: 2019-08-16T20:17:16 Last Updated: 2024-08-05T21:28:55.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/invite-anyone/#developers
CVE ID: CVE-2017-18545 State: PUBLISHED Published: 2019-08-16T20:16:41 Last Updated: 2024-08-05T21:28:55.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/invite-anyone/#developers
CVE ID: CVE-2017-18546 State: PUBLISHED Published: 2019-08-16T20:16:02 Last Updated: 2024-08-05T21:28:55.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/jayj-quicktag/#developers
CVE ID: CVE-2017-18547 State: PUBLISHED Published: 2019-08-16T20:14:10 Last Updated: 2024-08-05T21:28:55.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nelio-ab-testing/#developers
CVE ID: CVE-2017-18548 State: PUBLISHED Published: 2019-08-16T13:42:38 Last Updated: 2024-08-05T21:28:55.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The note-press plugin before 0.1.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/note-press/#developers
CVE ID: CVE-2017-18549 State: PUBLISHED Published: 2019-08-19T01:51:54 Last Updated: 2024-08-05T21:28:55.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_send_raw_srb does not initialize the reply structure. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860
CVE ID: CVE-2017-18550 State: PUBLISHED Published: 2019-08-19T01:51:40 Last Updated: 2024-08-05T21:28:55.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo structure. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860
CVE ID: CVE-2017-18551 State: PUBLISHED Published: 2019-08-19T01:51:01 Last Updated: 2024-08-05T21:28:55.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c6efa61f5709327ecfa24bff18e57a4e80c7fa - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-sec
15 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://support.f5.com/csp/article/K48073202?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2017-18552 State: PUBLISHED Published: 2019-08-19T01:50:43 Last Updated: 2024-08-05T21:28:55.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read in the function rds_recv_track_latency. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=780e982905bef61d13496d9af5310bf4af3a64d3 - https://support.f5.com/csp/article/K02460950 - https://support.f5.com/csp/article/K02460950?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2017-18553 State: PUBLISHED Published: 2019-08-21T12:48:18 Last Updated: 2024-08-05T21:28:55.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ad-buttons plugin before 2.3.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ad-buttons/#developers
CVE ID: CVE-2017-18554 State: PUBLISHED Published: 2019-08-21T12:49:31 Last Updated: 2024-08-05T21:28:55.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/analytics-tracker/#developers
CVE ID: CVE-2017-18555 State: PUBLISHED Published: 2019-08-21T12:50:39 Last Updated: 2024-08-05T21:28:55.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The booking-sms plugin before 1.1.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/booking-sms/#developers
CVE ID: CVE-2017-18556 State: PUBLISHED Published: 2019-08-21T12:51:55 Last Updated: 2024-08-05T21:28:55.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-google-analytics/#developers
CVE ID: CVE-2017-18557 State: PUBLISHED Published: 2019-08-21T12:53:03 Last Updated: 2024-08-05T21:28:55.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-google-maps/#developers
CVE ID: CVE-2017-18558 State: PUBLISHED Published: 2019-08-21T12:54:24 Last Updated: 2024-08-05T21:28:55.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-testimonials/#developers
CVE ID: CVE-2017-18559 State: PUBLISHED Published: 2019-08-21T18:12:14 Last Updated: 2024-08-05T21:28:55.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers - https://wpvulndb.com/vulnerabilities/9727
CVE ID: CVE-2017-18560 State: PUBLISHED Published: 2019-08-21T12:55:29 Last Updated: 2024-08-05T21:28:55.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The content-audit plugin before 1.9.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/content-audit/#developers
CVE ID: CVE-2017-18561 State: PUBLISHED Published: 2019-08-21T18:07:02 Last Updated: 2024-08-05T21:28:55.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embed-comment-images plugin before 0.6 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/embed-comment-images/#developers
CVE ID: CVE-2017-18562 State: PUBLISHED Published: 2019-08-21T18:06:27 Last Updated: 2024-08-05T21:28:55.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/error-log-viewer/#developers
CVE ID: CVE-2017-18563 State: PUBLISHED Published: 2019-08-21T17:20:04 Last Updated: 2024-08-05T21:28:55.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/rsvp/#developers
CVE ID: CVE-2017-18564 State: PUBLISHED Published: 2019-08-21T17:19:19 Last Updated: 2024-08-05T21:28:55.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sender plugin before 1.2.1 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sender/#developers
CVE ID: CVE-2017-18565 State: PUBLISHED Published: 2019-08-21T12:36:06 Last Updated: 2024-08-05T21:28:55.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updater plugin before 1.35 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/updater/#developers
CVE ID: CVE-2017-18566 State: PUBLISHED Published: 2019-08-20T15:02:14 Last Updated: 2024-08-05T21:28:55.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/user-role/#developers
CVE ID: CVE-2017-18567 State: PUBLISHED Published: 2019-08-20T15:00:32 Last Updated: 2024-08-05T21:28:55.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-all-import plugin before 3.4.6 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers
CVE ID: CVE-2017-18568 State: PUBLISHED Published: 2019-08-20T14:54:17 Last Updated: 2024-08-05T21:28:55.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The my-wp-translate plugin before 1.0.4 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/my-wp-translate/#developers
CVE ID: CVE-2017-18569 State: PUBLISHED Published: 2019-08-20T14:53:21 Last Updated: 2024-08-05T21:28:55.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The my-wp-translate plugin before 1.0.4 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/my-wp-translate/#developers
CVE ID: CVE-2017-18570 State: PUBLISHED Published: 2019-08-22T12:13:05 Last Updated: 2024-08-05T21:28:55.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers
CVE ID: CVE-2017-18571 State: PUBLISHED Published: 2019-08-22T12:19:28 Last Updated: 2024-08-05T21:28:55.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/search-everything/#developers
CVE ID: CVE-2017-18572 State: PUBLISHED Published: 2019-08-22T12:31:50 Last Updated: 2024-08-05T21:28:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnucommerce plugin before 1.4.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gnucommerce/#developers
CVE ID: CVE-2017-18573 State: PUBLISHED Published: 2019-08-22T12:34:58 Last Updated: 2024-08-05T21:28:55.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-login-log/#developers
CVE ID: CVE-2017-18574 State: PUBLISHED Published: 2019-08-22T12:42:15 Last Updated: 2024-08-05T21:28:55.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers
CVE ID: CVE-2017-18575 State: PUBLISHED Published: 2019-08-22T12:59:44 Last Updated: 2024-08-05T21:28:55.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2017-18576 State: PUBLISHED Published: 2019-08-22T13:03:20 Last Updated: 2024-08-05T21:28:55.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/event-notifier/#developers
CVE ID: CVE-2017-18577 State: PUBLISHED Published: 2019-08-22T13:08:09 Last Updated: 2024-08-05T21:28:55.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/mailchimp-for-wp/#developers
CVE ID: CVE-2017-18578 State: PUBLISHED Published: 2019-08-22T19:43:12 Last Updated: 2024-08-05T21:28:55.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/crafty-social-buttons/#developers
CVE ID: CVE-2017-18579 State: PUBLISHED Published: 2019-08-22T19:42:32 Last Updated: 2024-08-05T21:28:55.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The corner-ad plugin before 1.0.8 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/corner-ad/#developers
CVE ID: CVE-2017-18580 State: PUBLISHED Published: 2019-08-22T13:32:55 Last Updated: 2024-08-05T21:28:55.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/shortcodes-ultimate/#developers
CVE ID: CVE-2017-18581 State: PUBLISHED Published: 2019-08-22T13:35:13 Last Updated: 2024-08-05T21:28:55.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/time-sheets/#developers
CVE ID: CVE-2017-18582 State: PUBLISHED Published: 2019-08-22T13:35:51 Last Updated: 2024-08-05T21:28:55.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/time-sheets/#developers
CVE ID: CVE-2017-18583 State: PUBLISHED Published: 2019-08-22T13:42:35 Last Updated: 2024-08-05T21:28:55.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/post-pay-counter/#developers
CVE ID: CVE-2017-18584 State: PUBLISHED Published: 2019-08-22T13:43:39 Last Updated: 2024-08-05T21:28:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/post-pay-counter/#developers
CVE ID: CVE-2017-18585 State: PUBLISHED Published: 2019-08-22T19:37:36 Last Updated: 2024-08-05T21:28:55.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/posts-in-page/#developers - https://www.pluginvulnerabilities.com/2017/02/13/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page/
CVE ID: CVE-2017-18586 State: PUBLISHED Published: 2019-08-22T18:50:08 Last Updated: 2024-08-05T21:28:55.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/insert-pages/#developers
CVE ID: CVE-2017-18587 State: PUBLISHED Published: 2019-08-26T12:05:05 Last Updated: 2024-08-05T21:28:55.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2017-0002.html
CVE ID: CVE-2017-18588 State: PUBLISHED Published: 2019-08-26T17:18:39 Last Updated: 2024-08-05T21:28:55.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2017-0003.html
CVE ID: CVE-2017-18589 State: PUBLISHED Published: 2019-08-26T17:14:55 Last Updated: 2024-08-05T21:28:55.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2017-0005.html
CVE ID: CVE-2017-18590 State: PUBLISHED Published: 2019-08-27T11:52:56 Last Updated: 2024-08-05T21:28:55.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/timesheet/#developers
CVE ID: CVE-2017-18591 State: PUBLISHED Published: 2019-08-27T12:03:27 Last Updated: 2024-08-05T21:28:55.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gd-rating-system/#developers
CVE ID: CVE-2017-18592 State: PUBLISHED Published: 2019-08-27T12:07:17 Last Updated: 2024-08-05T21:28:55.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-catalog-enquiry/#developers