deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12668
Published: 2019-09-25
Description: A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software using the banner parameter. The vulnerability is due to insufficient input validation of the banner parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by crafting a banner parameter and saving it. The attacker could then convince a user of the web interface to access a malicious link or could intercept a user request for the affected web interface and inject malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-sbxss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-sbxss
CVE: CVE-2019-12669
Published: 2019-09-25
Description: A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-tsec; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-tsec
CVE: CVE-2019-12670
Published: 2019-09-25
Description: A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient file permissions. An attacker could exploit this vulnerability by modifying files that they should not have access to. A successful exploit could allow the attacker to remove container protections and perform file actions outside the namespace of the container.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284, CWE-276
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox-gs; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox-gs
CVE: CVE-2019-12671
Published: 2019-09-25
Description: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying operating system (OS). The vulnerability is due to insufficient enforcement of the consent token in authorizing shell access. An attacker could exploit this vulnerability by authenticating to the CLI and requesting shell access on an affected device. A successful exploit could allow the attacker to gain shell access on the affected device and execute commands on the underlying OS.
CVSS Score: 7.8 (HIGH)
CWE: CWE-285, CWE-863
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-ctbypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-ctbypass
CVE: CVE-2019-12672
Published: 2019-09-25
Description: A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient file location validation. An attacker could exploit this vulnerability by placing code in a specific format on a USB device and inserting it into an affected Cisco device. A successful exploit could allow the attacker to execute the code with root privileges on the underlying OS of the affected device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-codeexec; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-codeexec
CVE: CVE-2019-12709
Published: 2019-09-25
Description: A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of arguments passed to a specific VMAN CLI command on an affected device. An attacker who has valid administrator access to an affected device could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to run arbitrary commands on the underlying operating system with root privileges, which may lead to complete system compromise.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-xr-asr9k-privesc; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-xr-asr9k-privesc
CVE: CVE-2019-12717
Published: 2019-09-25
Description: A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of arguments passed to a specific VMAN CLI command on an affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges, which may lead to complete system compromise. An attacker would need valid administrator credentials to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-nxos-vman-cmd-inj; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-nxos-vman-cmd-inj
CVE: CVE-2019-16890
Published: 2019-09-25
Description: Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/halo-dev/halo/issues/311; https://github.com/halo-dev/halo/issues/311
CVE: CVE-2019-16892
Published: 2019-09-25
Description: In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).
CVSS Score: 5.5 (MEDIUM)
References: https://access.redhat.com/errata/RHBA-2019:4047; https://access.redhat.com/errata/RHSA-2019:4201; https://github.com/rubyzip/rubyzip/commit/d65fe7bd283ec94f9d6dc7605f61a6b0dd00f55e
CVE: CVE-2017-18635
Published: 2019-09-25
Description: An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/errata/RHSA-2020:0754; https://bugs.launchpad.net/horizon/+bug/1656435; https://github.com/ShielderSec/cve-2017-18635
CVE: CVE-2019-16253
Published: 2019-09-25
Description: The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/154614/Samsung-Mobile-Android-SamsungTTS-Privilege-Escalation.html; https://blog.flanker017.me/text-to-speech-speaks-pwned/; https://github.com/flankerhqd/vendor-android-cves/tree/master/SMT-CVE-2019-16253
CVE: CVE-2015-9410
Published: 2019-09-26
Description: The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2015-9410-blubrry.html; https://github.com/cybersecurityworks/Disclosed/issues/7; https://wordpress.org/plugins/powerpress/#developers
CVE: CVE-2015-9411
Published: 2019-09-26
Description: The Postmatic plugin before 1.4.6 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/postmatic/#developers; https://wpvulndb.com/vulnerabilities/8183; https://wordpress.org/plugins/postmatic/#developers
CVE: CVE-2015-9412
Published: 2019-09-26
Description: The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/royal-slider/#developers; https://wpvulndb.com/vulnerabilities/8182; https://wordpress.org/plugins/royal-slider/#developers
CVE: CVE-2015-9413
Published: 2019-09-26
Description: The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://packetstormsecurity.com/files/133480/; https://wordpress.org/plugins/eshop/#developers; https://wpvulndb.com/vulnerabilities/8180
CVE: CVE-2015-9414
Published: 2019-09-26
Description: The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-symposium/#developers; https://wpvulndb.com/vulnerabilities/8175; https://wordpress.org/plugins/wp-symposium/#developers
CVE: CVE-2015-9415
Published: 2019-09-26
Description: The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://wordpress.org/plugins/bj-lazy-load/#developers; https://wpvulndb.com/vulnerabilities/8174; https://wordpress.org/plugins/bj-lazy-load/#developers
CVE: CVE-2015-9416
Published: 2019-09-26
Description: The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/sitepress-multilingual-cms/#developers; https://wpvulndb.com/vulnerabilities/8173; https://wordpress.org/plugins/sitepress-multilingual-cms/#developers
CVE: CVE-2015-9417
Published: 2019-09-26
Description: The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/testimonial-slider/#developers; https://wpvulndb.com/vulnerabilities/8170; https://wordpress.org/plugins/testimonial-slider/#developers
CVE: CVE-2015-9418
Published: 2019-09-26
Description: The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/; https://wordpress.org/plugins/watupro/#developers; https://calendarscripts.info/watupro/
CVE: CVE-2015-9419
Published: 2019-09-26
Description: The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/133362/; https://wordpress.org/plugins/captain-slider/#developers; https://packetstormsecurity.com/files/133362/
CVE: CVE-2015-9420
Published: 2019-09-26
Description: The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_9acbc3ef2dd43bfb78b6b3dcf6c5ef01.html; https://wordpress.org/plugins/soundcloud-is-gold/#developers; https://wpvulndb.com/vulnerabilities/8306
CVE: CVE-2015-9421
Published: 2019-09-26
Description: The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_d9e466122cd9a6ca27db840cca277cdb.html; https://wordpress.org/plugins/olevmedia-shortcodes/#developers; https://wpvulndb.com/vulnerabilities/8338
CVE: CVE-2015-9422
Published: 2019-09-26
Description: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_b5405e735cb605b2fd1a300bb8be4860.html; https://wordpress.org/plugins/plugnedit/#developers; https://wpvulndb.com/vulnerabilities/8331
CVE: CVE-2015-9423
Published: 2019-09-26
Description: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount, or plugneditcontent parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_b5405e735cb605b2fd1a300bb8be4860.html; https://wordpress.org/plugins/plugnedit/#developers; https://wpvulndb.com/vulnerabilities/8331
CVE: CVE-2015-9424
Published: 2019-09-26
Description: The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_aea47a98ad3088dbb33528ded8e1b124.html; https://wordpress.org/plugins/multicons/#developers; https://wpvulndb.com/vulnerabilities/8330
CVE: CVE-2015-9425
Published: 2019-09-26
Description: The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_9e26c6f71bf8467e4a5017b15d5acddc.html; https://wordpress.org/plugins/social-locker/#developers; https://wpvulndb.com/vulnerabilities/8327
CVE: CVE-2015-9426
Published: 2019-09-26
Description: The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_7c87194ce1dcf0642135d17a71ed91cd.html; https://wordpress.org/plugins/manual-image-crop/#developers; https://wpvulndb.com/vulnerabilities/8297
CVE: CVE-2015-9427
Published: 2019-09-26
Description: The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/133267/; https://wordpress.org/plugins/googmonify/#developers; https://wpvulndb.com/vulnerabilities/8158
CVE: CVE-2015-9428
Published: 2019-09-26
Description: The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_4e7cf11876edb93517405b69cb033741.html; https://wordpress.org/plugins/wplegalpages/#developers; https://wpvulndb.com/vulnerabilities/8291
CVE: CVE-2015-9429
Published: 2019-09-26
Description: The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_3a14a77571c73684103e0f517a92d757.html; https://wordpress.org/plugins/yith-maintenance-mode/#developers; https://wpvulndb.com/vulnerabilities/8285
CVE: CVE-2015-9430
Published: 2019-09-26
Description: The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_e22c10161b1e2e4e54facf2d17e723c3.html; https://wordpress.org/plugins/crazy-bone/#developers; https://wpvulndb.com/vulnerabilities/8281
CVE: CVE-2015-9449
Published: 2019-09-26
Description: The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_642d8f7d8715d08f070a35b896f2d8bd.html; https://wordpress.org/plugins/microblog-poster/#developers; https://wpvulndb.com/vulnerabilities/8321
CVE: CVE-2019-16899
Published: 2019-09-26
Description: In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x[PII_REDACTED]512918.
CVSS Score: 7.5 (HIGH)
References: http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html; http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE: CVE-2019-16900
Published: 2019-09-26
Description: Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x[PII_REDACTED]00015c.
CVSS Score: 7.5 (HIGH)
References: http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html; http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE: CVE-2019-16901
Published: 2019-09-26
Description: Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x[PII_REDACTED]000000 called from ntdll!RtlRaiseStatus+0x[PII_REDACTED]0000b4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html; http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE: CVE-2015-9431
Published: 2019-09-26
Description: The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_1a40d7e7a2c29847b939f2c7472c335e.html; https://wordpress.org/plugins/qtranslate-x/#developers; https://wpvulndb.com/vulnerabilities/8279
CVE: CVE-2015-9432
Published: 2019-09-26
Description: The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_8af3902b4f3a5d06304937c7eab1ee35.html; https://wordpress.org/plugins/alpine-photo-tile-for-instagram/#developers; https://wpvulndb.com/vulnerabilities/8268
CVE: CVE-2015-9433
Published: 2019-09-26
Description: The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html; https://wordpress.org/plugins/wp-social-bookmarking-light/#developers; https://wpvulndb.com/vulnerabilities/8252
CVE: CVE-2015-9434
Published: 2019-09-26
Description: The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or tab_flags_order parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_3764bb40db5ed12aac2c7812d7544730.html; https://wordpress.org/plugins/kiwi-logo-carousel/#developers; https://wpvulndb.com/vulnerabilities/8290
CVE: CVE-2015-9435
Published: 2019-09-26
Description: The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-338
References: https://security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure/; https://wordpress.org/plugins/oauth2-provider/#developers; https://security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure/
CVE: CVE-2015-9436
Published: 2019-09-26
Description: The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_489304900a50751da1495e2ea660bc51.html; https://wordpress.org/plugins/dynamic-widgets/#developers; https://wpvulndb.com/vulnerabilities/8258
CVE: CVE-2015-9437
Published: 2019-09-26
Description: The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cinu.pl/research/wp-plugins/mail_489304900a50751da1495e2ea660bc51.html; https://wordpress.org/plugins/dynamic-widgets/#developers; https://wpvulndb.com/vulnerabilities/8258
CVE: CVE-2015-9438
Published: 2019-09-26
Description: The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_base, widget_number, or instance parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_a7012199c9236754edd72786637e5d2d.html; https://wordpress.org/plugins/display-widgets/#developers; https://wpvulndb.com/vulnerabilities/8247
CVE: CVE-2019-16738
Published: 2019-09-26
Description: In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6/; https://phabricator.wikimedia.org/T230402
CVE: CVE-2015-9439
Published: 2019-09-26
Description: The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthis_social_widget pubid parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html; https://wordpress.org/plugins/addthis/#developers; https://wpvulndb.com/vulnerabilities/8246
CVE: CVE-2015-9440
Published: 2019-09-26
Description: The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-new.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/133002/; https://wordpress.org/plugins/monetize/#developers; http://packetstormsecurity.com/files/133002/
CVE: CVE-2015-9441
Published: 2019-09-26
Description: The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/133001/; https://wordpress.org/plugins/bookmarkify/#developers; http://packetstormsecurity.com/files/133001/