Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9262 State: PUBLISHED Published: 2018-08-01T23:00:00 Last Updated: 2024-08-06T08:43:42.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3059 - https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05 - https://usn.ubuntu.com/3729-1/ - https://access.redhat.com/errata/RHSA-2018:3505 - https://lists.debian.org/debian-lts-announce/2018/08/msg0
om/3729-1/ - https://access.redhat.com/errata/RHSA-2018:3505 - https://lists.debian.org/debian-lts-announce/2018/08/msg00016.html - https://bugs.freedesktop.org/show_bug.cgi?id=90857
CVE ID: CVE-2015-9263 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-06T08:43:42.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php - https://www.exploit-db.com/exploits/37888/ - https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2
CVE ID: CVE-2015-9264 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-06T08:43:42.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service. Additional Analyst Notes: - CVE Program Container: References: - https://www.lansweeper.com/updates/lansweeper-6-0-0-48-security-update/
CVE ID: CVE-2015-9265 State: REJECTED Published: 2018-08-30T13:00:00 Last Updated: 2018-08-30T13:57:01 Description: No description available.
CVE ID: CVE-2015-9266 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-06T08:43:42.375Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5
uct versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload - https://www.exploit-db.com/exploits/39701/ - https://hackerone.com/reports/73480 - https://community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949 - https://www.exploit-db.com/exploits/39853/ -
dates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949 - https://www.exploit-db.com/exploits/39853/ - https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940 - https://community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494
CVE ID: CVE-2015-9267 State: PUBLISHED Published: 2018-10-01T08:00:00 Last Updated: 2024-08-06T08:43:42.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00041.html - https://sourceforge.net/p/nsis/bugs/1125/ - http://jvn.jp/en/jp/JVN68418039/index.html
CVE ID: CVE-2015-9268 State: PUBLISHED Published: 2018-10-01T08:00:00 Last Updated: 2024-08-06T08:43:42.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00041.html - https://sourceforge.net/p/nsis/bugs/1125/ - http://jvn.jp/en/jp/JVN68418039/index.html
CVE ID: CVE-2015-9269 State: PUBLISHED Published: 2018-10-01T23:00:00 Last Updated: 2024-08-06T08:43:42.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2015/07/19/1 - https://seclists.org/fulldisclosure/2015/Jul/97 - https://wordpress.org/plugins/wordpress-mobile-pack/#developers
CVE ID: CVE-2015-9270 State: PUBLISHED Published: 2018-10-01T23:00:00 Last Updated: 2024-08-06T08:43:42.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/the-holiday-calendar/#developers - https://seclists.org/fulldisclosure/2015/Jul/125
CVE ID: CVE-2015-9271 State: PUBLISHED Published: 2018-10-04T23:00:00 Last Updated: 2024-08-06T08:43:42.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=116
CVE ID: CVE-2015-9272 State: PUBLISHED Published: 2018-10-05T05:00:00Z Last Updated: 2024-09-17T01:20:41.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=117 - https://www.openwall.com/lists/oss-security/2015/04/01/2
CVE ID: CVE-2015-9273 State: PUBLISHED Published: 2018-10-07T17:00:00Z Last Updated: 2024-09-17T04:08:57.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2015/07/30/1 - https://plugins.trac.wordpress.org/changeset/1204104 - http://plugins.svn.wordpress.org//wp-slimstat/tags/4.1.6.1/readme.txt
CVE ID: CVE-2015-9274 State: PUBLISHED Published: 2018-11-15T05:00:00 Last Updated: 2024-08-06T08:43:42.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harfbuzz/harfbuzz/commit/c917965b9e6fe2b21ed6c51559673288fa3af4b7
CVE ID: CVE-2015-9275 State: PUBLISHED Published: 2019-01-07T18:00:00 Last Updated: 2024-08-06T08:43:42.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARC 5.21q allows directory traversal via a full pathname in an archive file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1179142 - https://bugs.debian.org/774527 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00048.html
CVE ID: CVE-2015-9276 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-06T08:43:42.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker's email, which contained a malicious payload. Therefore, users' passwords could be reset by using an XSS attack, as the password reset page did not need the current password. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/uk/our-research/smartermail-stored-xss-in-emails/ - https://www.n
am Container: References: - https://www.nccgroup.trust/uk/our-research/smartermail-stored-xss-in-emails/ - https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-smartermail-stored-xss-in-emails-v2.pdf - https://www.smartertools.com/smartermail/release-notes/13
CVE ID: CVE-2015-9277 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-06T08:43:42.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf - https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable.c
ur-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
CVE ID: CVE-2015-9278 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-06T08:43:42.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf - https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable
/our-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
CVE ID: CVE-2015-9279 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-06T08:43:42.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf - https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
CVE ID: CVE-2015-9280 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-06T08:43:42.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/globalassets/our-research/uk/technical-advisories/2015/technical-advisory-multiple-vulnerabilities-in-mailenable.pdf - https://www.nccgroup.trust/uk/our-research/multiple-vulnerabilities-in-mailenable/ - https://web.archive.org/web/20150329173628/http://www.mailenable.com/Standard-ReleaseNotes.txt
CVE ID: CVE-2015-9281 State: PUBLISHED Published: 2019-01-17T01:00:00 Last Updated: 2024-08-06T08:43:42.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page. Additional Analyst Notes: - CVE Program Container: References: - http://support.sas.com/kb/55/537.html
CVE ID: CVE-2015-9282 State: PUBLISHED Published: 2019-02-06T19:00:00 Last Updated: 2024-08-06T08:43:42.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/piechart-panel/pull/163 - https://github.com/grafana/grafana/issues/4117 - https://github.com/grafana/piechart-panel/issues/3 - https://padlock.argh.in/2019/02/05/exploiting-xss-gr
/issues/4117 - https://github.com/grafana/piechart-panel/issues/3 - https://padlock.argh.in/2019/02/05/exploiting-xss-grafana.html
CVE ID: CVE-2015-9284 State: PUBLISHED Published: 2019-04-26T14:03:53 Last Updated: 2024-08-06T08:43:42.338Z Vendors: n/a Products: omniauth ruby gem Problem Types: CWE-352 Description: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/omniauth/omniauth/pull/809 - https://github.com/omniauth/omniauth-rails/pu
m Container: References: - https://github.com/omniauth/omniauth/pull/809 - https://github.com/omniauth/omniauth-rails/pull/1 - https://www.openwall.com/lists/oss-security/2015/05/26/11 - https://github.com/omniauth/omniauth/wiki/Resolving-CVE-2015-9284
CVE ID: CVE-2015-9285 State: PUBLISHED Published: 2019-04-29T13:47:07 Last Updated: 2024-08-06T08:43:42.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/esotalk/esoTalk/issues/444 - https://lists.openwall.net/full-disclosure/2015/12/23/13
CVE ID: CVE-2015-9286 State: PUBLISHED Published: 2019-04-30T13:07:10 Last Updated: 2024-08-06T08:43:42.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1608 - https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625 - https://github.com/NodeBB/NodeBB/pull/3371 - https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529
CVE ID: CVE-2015-9287 State: PUBLISHED Published: 2019-05-13T15:44:06 Last Updated: 2024-08-06T08:43:42.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response message ("WLS-Response") can be manipulated by an attacker. The "kid" field is not signed like the rest of the message, and manipulation is therefore trivial. The "kid" field should only ever represent an integer. However, it is possible to provide any string value. An attacker could use this to their advantage to force the application agent to load the RSA public key requ
ring value. An attacker could use this to their advantage to force the application agent to load the RSA public key required for message integrity checking from an unintended location. Additional Analyst Notes: - CVE Program Container: References: - https://doi.org/10.1007/978-3-030-03251-7_1 - https://github.com/grymer/CVE
CVE ID: CVE-2015-9288 State: PUBLISHED Published: 2019-07-29T15:28:09 Last Updated: 2024-08-06T08:43:42.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials Additional Analyst Notes: - CVE Program Container: References: - https://blogs.unity3d.com/2015/06/06/security-update-coming-for-web-player/
CVE ID: CVE-2015-9289 State: PUBLISHED Published: 2019-07-27T21:38:59 Last Updated: 2024-08-06T08:43:42.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c - https:
s://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c - https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
CVE ID: CVE-2015-9290 State: PUBLISHED Published: 2019-07-30T12:36:19 Last Updated: 2024-08-06T08:43:42.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/bugs/?45923 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=e3058617f384cb6709f3878f753fa17aca9e3a30 - https://lists.debian.org/debian-lts-announce/2019/08/msg00019.html - https://support.f5.com/csp/
3878f753fa17aca9e3a30 - https://lists.debian.org/debian-lts-announce/2019/08/msg00019.html - https://support.f5.com/csp/article/K38315305 - https://support.f5.com/csp/article/K38315305?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2015-9291 State: PUBLISHED Published: 2019-08-01T14:34:03 Last Updated: 2024-08-06T08:43:42.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/11.52+Change+Log
CVE ID: CVE-2015-9292 State: PUBLISHED Published: 2019-08-08T20:01:42 Last Updated: 2024-08-06T08:43:42.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter). Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2015040034
CVE ID: CVE-2015-9293 State: PUBLISHED Published: 2019-08-13T16:52:23 Last Updated: 2024-08-06T08:43:42.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE ID: CVE-2015-9294 State: PUBLISHED Published: 2019-08-13T16:51:48 Last Updated: 2024-08-06T08:43:42.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE ID: CVE-2015-9295 State: PUBLISHED Published: 2019-08-13T16:48:27 Last Updated: 2024-08-06T08:43:42.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-plugin plugin before 3.96 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-plugin/#developers
CVE ID: CVE-2015-9296 State: PUBLISHED Published: 2019-08-13T16:44:06 Last Updated: 2024-08-06T08:43:42.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/download-monitor/#developers
CVE ID: CVE-2015-9297 State: PUBLISHED Published: 2019-08-13T16:43:30 Last Updated: 2024-08-06T08:43:42.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.6 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - https://wpvulndb.com/vulnerabilities/9761
CVE ID: CVE-2015-9298 State: PUBLISHED Published: 2019-08-13T16:42:49 Last Updated: 2024-08-06T08:43:42.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.6 for WordPress has code injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - https://wpvulndb.com/vulnerabilities/9761
CVE ID: CVE-2015-9299 State: PUBLISHED Published: 2019-08-13T16:42:18 Last Updated: 2024-08-06T08:43:42.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2015-9300 State: PUBLISHED Published: 2019-08-13T16:41:40 Last Updated: 2024-08-06T08:43:42.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2015-9301 State: PUBLISHED Published: 2019-08-13T16:37:00 Last Updated: 2024-08-06T08:43:42.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liveforms plugin before 3.2.0 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/liveforms/#developers
CVE ID: CVE-2015-9302 State: PUBLISHED Published: 2019-08-13T16:35:24 Last Updated: 2024-08-06T08:43:42.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-fields plugin before 1.4.11 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8342 - https://wordpress.org/plugins/simple-fields/#developers