Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9505 State: PUBLISHED Published: 2019-10-23T16:13:41 Last Updated: 2024-08-06T08:51:05.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9506 State: PUBLISHED Published: 2019-10-23T16:13:25 Last Updated: 2024-08-06T08:51:05.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9507 State: PUBLISHED Published: 2019-10-23T16:13:05 Last Updated: 2024-08-06T08:51:05.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9508 State: PUBLISHED Published: 2019-10-23T16:12:35 Last Updated: 2024-08-06T08:51:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9509 State: PUBLISHED Published: 2019-10-23T16:12:19 Last Updated: 2024-08-06T08:51:05.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9510 State: PUBLISHED Published: 2019-10-23T16:12:02 Last Updated: 2024-08-06T08:51:05.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9511 State: PUBLISHED Published: 2019-10-23T16:11:30 Last Updated: 2024-08-06T08:51:05.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9512 State: PUBLISHED Published: 2019-10-23T16:11:09 Last Updated: 2024-08-06T08:51:05.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9513 State: PUBLISHED Published: 2019-10-23T16:10:43 Last Updated: 2024-08-06T08:51:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9514 State: PUBLISHED Published: 2019-10-23T16:10:22 Last Updated: 2024-08-06T08:51:05.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9515 State: PUBLISHED Published: 2019-10-23T16:10:04 Last Updated: 2024-08-06T08:51:05.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9516 State: PUBLISHED Published: 2019-10-23T16:08:55 Last Updated: 2024-08-06T08:51:05.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9517 State: PUBLISHED Published: 2019-10-23T16:08:34 Last Updated: 2024-08-06T08:51:05.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9518 State: PUBLISHED Published: 2019-10-23T16:08:11 Last Updated: 2024-08-06T08:51:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9519 State: PUBLISHED Published: 2019-10-23T16:07:51 Last Updated: 2024-08-06T08:51:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9520 State: PUBLISHED Published: 2019-10-23T16:04:33 Last Updated: 2024-08-06T08:51:05.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9521 State: PUBLISHED Published: 2019-10-23T16:03:40 Last Updated: 2024-08-06T08:51:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9522 State: PUBLISHED Published: 2019-10-23T16:02:54 Last Updated: 2024-08-06T08:51:05.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9523 State: PUBLISHED Published: 2019-10-23T16:02:17 Last Updated: 2024-08-06T08:51:05.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9524 State: PUBLISHED Published: 2019-10-23T16:01:31 Last Updated: 2024-08-06T08:51:05.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9525 State: PUBLISHED Published: 2019-10-23T16:00:49 Last Updated: 2024-08-06T08:51:05.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9526 State: PUBLISHED Published: 2019-10-23T16:00:15 Last Updated: 2024-08-06T08:51:05.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9527 State: PUBLISHED Published: 2019-10-23T15:59:22 Last Updated: 2024-08-06T08:51:05.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9528 State: PUBLISHED Published: 2019-10-23T15:58:40 Last Updated: 2024-08-06T08:51:05.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9529 State: PUBLISHED Published: 2019-10-23T15:57:57 Last Updated: 2024-08-06T08:51:05.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9530 State: PUBLISHED Published: 2019-10-23T15:57:27 Last Updated: 2024-08-06T08:51:05.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9531 State: PUBLISHED Published: 2019-10-23T15:56:45 Last Updated: 2024-08-06T08:51:05.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9532 State: PUBLISHED Published: 2019-10-23T15:56:00 Last Updated: 2024-08-06T08:51:05.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9533 State: PUBLISHED Published: 2019-10-23T15:55:16 Last Updated: 2024-08-06T08:51:05.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9534 State: PUBLISHED Published: 2019-10-23T15:54:43 Last Updated: 2024-08-06T08:51:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9535 State: PUBLISHED Published: 2019-10-23T15:53:21 Last Updated: 2024-08-06T08:51:05.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9536 State: PUBLISHED Published: 2019-10-23T15:49:27 Last Updated: 2024-08-06T08:51:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/
CVE ID: CVE-2015-9537 State: PUBLISHED Published: 2019-11-26T14:59:27 Last Updated: 2024-08-06T08:51:05.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nextgen-gallery/#developers - https://github.com/cybersecurityworks/Disclosed/issues/1 - https://www.openwall.com/lists/oss-security/2015/10/27/4 - https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html
CVE ID: CVE-2015-9538 State: PUBLISHED Published: 2019-11-26T14:59:17 Last Updated: 2024-08-06T08:51:05.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nextgen-gallery/#developers - https://github.com/cybersecurityworks/Disclosed/issues/2 - https://packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html - https://cxsecurity.com/issue/WLB-2015080165 - https://www.openwall.com/lists/oss-security/2015/08/28/4 - https://www.openw
tps://cxsecurity.com/issue/WLB-2015080165 - https://www.openwall.com/lists/oss-security/2015/08/28/4 - https://www.openwall.com/lists/oss-security/2015/09/01/7 - https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html
CVE ID: CVE-2015-9539 State: PUBLISHED Published: 2019-11-26T14:59:07 Last Updated: 2024-08-06T08:51:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/4 - https://www.openwall.com/lists/oss-security/2015/10/27/2 - https://github.com/amansaini/fast-secure-contact-form - https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html
CVE ID: CVE-2015-9540 State: PUBLISHED Published: 2020-01-04T06:20:37 Last Updated: 2024-08-06T08:51:05.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-18-2015-05-02-Low-Moderate-risk-URL-hijackingspoofing
CVE ID: CVE-2015-9541 State: PUBLISHED Published: 2020-01-24T21:53:41 Last Updated: 2024-08-06T08:51:05.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://bugreports.qt.io/browse/QTBUG-47417 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PT6327C64Q4RBFRWUSBKCG7SVGBWU5W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZMMF4OEJAZRVKVXNO7IZWLE
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZMMF4OEJAZRVKVXNO7IZWLEZVQGJN6G/
CVE ID: CVE-2015-9542 State: PUBLISHED Published: 2020-02-24T14:14:13 Last Updated: 2024-08-06T08:51:05.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb
Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0 - https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542 - https://usn.ubuntu.com/4290-1/ - https://usn.ubuntu.com/4290-2/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html
CVE ID: CVE-2015-9543 State: PUBLISHED Published: 2020-02-19T02:11:06 Last Updated: 2024-08-06T08:51:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1492140 - https://review.opendev.org/220622 - https:/