Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4502 State: PUBLISHED Published: 2014-07-23T14:00:00 Last Updated: 2024-08-06T11:20:26.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68831 - https://github.com/luke-jr/bfgminer/commit/ff7f30129f15f7a2213f8ced0cd65c9a331493d9 - https://g
ityfocus.com/bid/68831 - https://github.com/luke-jr/bfgminer/commit/ff7f30129f15f7a2213f8ced0cd65c9a331493d9 - https://github.com/sgminer-dev/sgminer/commit/bac5831b355f916e0696b7bbcccfc51c057b729a - https://github.com/sgminer-dev/sgminer/issues/258 - http://seclists.org/fulldisclosure/2014/Jul/119 - https://github.com/ckolivas/cgminer/commit/e1c5050734123973b99d181c45e74b2cbb00272e
CVE ID: CVE-2014-4503 State: PUBLISHED Published: 2014-07-23T14:00:00 Last Updated: 2024-08-06T11:20:25.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (3) nbit, or (4) ntime parameter in a mining.notify action stratum message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/120 - https://github.com/sgminer-dev/sgminer/commit/910c36089940e81fb85c65b8e63dcd2fac71470c
CVE ID: CVE-2014-4505 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T11:20:26.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2286121 - http://secunia.com/advisories/59379 - https://www.drupal.org/node/2288353 - http://www.securityfocus.com/bid/68106
CVE ID: CVE-2014-4506 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T11:20:26.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer custom meta settings" permission to inject arbitrary web script or HTML via the (1) attribute or (2) content value for a meta tag. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2288417 - http://secunia.com/advisories/59367 - https://www.drupal.org/node/2288415 - https://www.drupal.org/node/2288429 - h
17 - http://secunia.com/advisories/59367 - https://www.drupal.org/node/2288415 - https://www.drupal.org/node/2288429 - http://www.securityfocus.com/bid/68108
CVE ID: CVE-2014-4507 State: PUBLISHED Published: 2014-06-20T14:00:00Z Last Updated: 2024-09-16T20:07:12.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/6086
CVE ID: CVE-2014-4508 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T11:20:26.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.openwall.com/lists/oss-security/2014/06/20/10 - http://openwall.com/lists/oss-security/
14-10/msg00006.html - http://www.openwall.com/lists/oss-security/2014/06/20/10 - http://openwall.com/lists/oss-security/2014/06/20/1 - http://www.ubuntu.com/usn/USN-2334-1 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.securityfocus.com/bid/68126 - http://article.gmane.org/gmane.linux.kernel/1726110 - http://secunia.com/advisories/58964 - http://www.openwall.com/lists/oss-security/2020/11/12/3
CVE ID: CVE-2014-4509 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T11:20:26.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68139 - http://download.novell.com/Download?buildid=5XLmBl54_Rg~
CVE ID: CVE-2014-4510 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T11:20:26.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/603 - http://www.securityfocus.com/bid/68136 - http://anonscm.debian.org/cgit/apt-cacher-ng/apt-cacher-ng.git/diff/?id=6f08e6a3995d1bed4e837889a3945b6dc650f6ad - http://seclists.org/oss-sec/2014/q2/602 - https://bugzilla.redhat.com/show_bug.cgi?id=1111807 - http://sources.g
0f6ad - http://seclists.org/oss-sec/2014/q2/602 - https://bugzilla.redhat.com/show_bug.cgi?id=1111807 - http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-misc/apt-cacher-ng/files/apt-cacher-ng-0.7.26-CVE-2014-4510.patch?view=markup
CVE ID: CVE-2014-4511 State: PUBLISHED Published: 2014-07-22T14:00:00 Last Updated: 2024-08-06T11:20:25.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/gitlist/Hw_KdZfA4js - http://hatriot.github.io/blog/2014/06/29/gitlist-rce/ - http://packetstormsecurity.com/files/127281/Gitlist-0.4.0-Remote-Code-Execution.html -
io/blog/2014/06/29/gitlist-rce/ - http://packetstormsecurity.com/files/127281/Gitlist-0.4.0-Remote-Code-Execution.html - http://www.exploit-db.com/exploits/33990 - http://packetstormsecurity.com/files/127364/Gitlist-Unauthenticated-Remote-Command-Execution.html - http://www.exploit-db.com/exploits/33929
CVE ID: CVE-2014-4513 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-activehelper-livehelp-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4514 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T11:20:25.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/847094 - http://codevigilant.com/disclosure/wp-plugin-alipay-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4515 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mce_anyfont/dialog.php in the AnyFont plugin 2.2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68314 - http://codevigilant.com/disclosure/wp-plugin-anyfont-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4516 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:25.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-bic-media-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4517 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T11:20:25.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-cbi-referral-manager-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4518 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:25.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-contactme-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4519 State: PUBLISHED Published: 2019-12-27T16:39:44 Last Updated: 2024-08-06T11:20:26.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-conversador-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4520 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugin_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-dmca-watermarker-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=904684%40dmca-watermarker&old=549072%40dmca-watermarker - http://www.securityfocus.com/bi
mail=&sfph_mail=&reponame=&new=904684%40dmca-watermarker&old=549072%40dmca-watermarker - http://www.securityfocus.com/bid/68313
CVE ID: CVE-2014-4521 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/dsidxpress/changelog - http://codevigilant.com/disclosure/wp-plugin-dsidxpress-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4522 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:25.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-dssearchagent-wordpress-edition-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4523 State: PUBLISHED Published: 2019-12-27T13:43:51 Last Updated: 2024-08-06T11:20:26.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-easy-career-openings-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4524 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:25.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ref parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/easy-post-types/changelog - http://codevigilant.com/disclosure/wp-plugin-easy-post-types-a3-cross-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=842687%40easy-pos
-site-scripting-xss - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=842687%40easy-post-types&old=806912%40easy-post-types&sfp_email=&sfph_mail=
CVE ID: CVE-2014-4525 State: PUBLISHED Published: 2019-12-27T13:47:36 Last Updated: 2024-08-06T11:20:26.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-ebay-feeds-for-wordpress-a3-cross-site-scripting-xss - http://wordpress.org/plugins/ebay-feeds-for-wordpress/changelog
CVE ID: CVE-2014-4526 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:25.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) zoneid, (3) pubKey, or (4) privKey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-efence-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4527 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) FormID or (2) AdministratorID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=843064%40envialosimple-email-marketing-y-newsl
/plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=843064%40envialosimple-email-marketing-y-newsletters-gratis&old=839677%40envialosimple-email-marketing-y-newsletters-gratis&sfp_email=&sfph_mail= - http://codevigilant.com/disclosure/wp-plugin-envialosimple-email-marketing-y-newsletters-gratis-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4528 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go Viral : Facebook Promotion Generator (fbpromotions) plugin 1.3.4 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) promo_type, (2) fb_edit_action, or (3) promo_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-fbpromotions-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4529 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fpg_preview.php in the Flash Photo Gallery plugin 0.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-flash-photo-gallery-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4530 State: PUBLISHED Published: 2020-01-10T13:00:25 Last Updated: 2024-08-06T11:20:26.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: flog plugin 0.1 for WordPress has XSS Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-flog-a3-cross-site-scripting-xss/
CVE ID: CVE-2014-4531 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-game-tabs-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4532 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-garagesale-a3-cross-site-scripting-xss - http://wordpress.org/plugins/garagesale/changelog
CVE ID: CVE-2014-4533 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajax_functions.php in the GEO Redirector plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the hid_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-geo-redirector-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4534 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) theme or (2) playlistmod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-html5-video-player-with-playlist-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4535 State: PUBLISHED Published: 2019-12-27T19:28:10 Last Updated: 2024-08-06T11:20:26.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-import-legacy-media-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4536 State: PUBLISHED Published: 2019-12-27T19:01:40 Last Updated: 2024-08-06T11:20:26.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) go, (2) contactId, or (3) campaignId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-infusionsoft-a3-cross-site-scripting-xss - http://wordpress.org/plugins/infusionsoft/changelog
CVE ID: CVE-2014-4537 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) sort, (2) search, or (3) dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-keyword-strategy-internal-links-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4538 State: PUBLISHED Published: 2014-07-01T14:00:00 Last Updated: 2024-08-06T11:20:26.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-malware-finder-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4539 State: PUBLISHED Published: 2019-12-27T18:50:17 Last Updated: 2024-08-06T11:20:26.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-movies-a3-cross-site-scripting-xss
CVE ID: CVE-2014-4540 State: PUBLISHED Published: 2014-07-02T18:00:00 Last Updated: 2024-08-06T11:20:26.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-oleggo-livestream-a3-cross-site-scripting-xss