rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-10787 
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T12:57:40.000Z
CVE-2016-10788 
cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T12:58:35.000Z
CVE-2016-10789 
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T12:59:20.000Z
CVE-2016-10790 
cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:00:07.000Z
CVE-2016-10791 
cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:01:18.000Z
CVE-2016-10792 
cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:02:45.000Z
CVE-2016-10793 
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:04:54.000Z
CVE-2016-10794 
cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:05:39.000Z
CVE-2016-10795 
cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:06:35.000Z
CVE-2016-10796 
cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:08:04.000Z
CVE-2016-10797 
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-06T13:08:57.000Z
CVE-2016-10798 
cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:20:34.000Z
CVE-2016-10799 
cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:21:21.000Z
CVE-2016-10800 
cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:22:10.000Z
CVE-2016-10801 
cPanel before 58.0.4 has improper session handling for shared users (SEC-139).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:23:00.000Z
CVE-2016-10802 
cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:23:47.000Z
CVE-2016-10803 
cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:24:50.000Z
CVE-2016-10804 
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:26:13.000Z
CVE-2016-10805 
cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:27:17.000Z
CVE-2016-10806 
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:28:12.000Z
CVE-2016-10807 
cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:29:00.000Z
CVE-2016-10808 
In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:29:46.000Z
CVE-2016-10809 
In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:30:46.000Z
CVE-2016-10810 
In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:31:35.000Z
CVE-2016-10811 
In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:32:33.000Z
CVE-2016-10812 
In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:33:23.000Z
CVE-2016-10813 
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:54:18.000Z
CVE-2016-10814 
cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:53:49.000Z
CVE-2016-10815 
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:53:15.000Z
CVE-2016-10816 
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:52:32.000Z
CVE-2016-10817 
cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:51:53.000Z
CVE-2016-10818 
cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:43:03.000Z
CVE-2016-10819 
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:31:07.000Z
CVE-2016-10820 
cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:30:32.000Z
CVE-2016-10821 
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:29:56.000Z
CVE-2016-10822 
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:45:26.000Z
CVE-2016-10823 
cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:42:57.000Z
CVE-2016-10824 
cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:40:48.000Z
CVE-2016-10825 
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:39:15.000Z
CVE-2016-10826 
cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T18:28:55.000Z
CVE-2016-10827 
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:37:09.000Z
CVE-2016-10828 
cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:36:17.000Z
CVE-2016-10829 
cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:35:10.000Z
CVE-2016-10830 
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:33:45.000Z
CVE-2016-10831 
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:25:40.000Z
CVE-2016-10832 
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:12:16.000Z
CVE-2016-10833 
cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:09:17.000Z
CVE-2016-10834 
cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:07:07.000Z
CVE-2016-10835 
cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:06:10.000Z
CVE-2016-10836 
cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:51:44.000Z
CVE-2016-10837 
cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:46:48.000Z
CVE-2016-10838 
cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:46:08.000Z
CVE-2016-10839 
cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:44:49.000Z
CVE-2016-10840 
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:44:25.000Z
CVE-2016-10841 
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:43:26.000Z
CVE-2016-10842 
cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:41:34.000Z
CVE-2016-10843 
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:40:51.000Z
CVE-2016-10844 
The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:39:59.000Z
CVE-2016-10845 
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:39:09.000Z
CVE-2016-10846 
cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:38:04.000Z
CVE-2016-10847 
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:30:10.000Z
CVE-2016-10848 
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:26:37.000Z
CVE-2016-10849 
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:25:05.000Z
CVE-2016-10850 
cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:57:01.000Z
CVE-2016-10851 
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:48:24.000Z
CVE-2016-10852 
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:47:13.000Z
CVE-2016-10853 
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:45:00.000Z
CVE-2016-10854 
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:43:40.000Z
CVE-2016-10855 
cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:42:27.000Z
CVE-2016-10856 
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:41:31.000Z
CVE-2016-10857 
cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:40:08.000Z
CVE-2016-10858 
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:38:03.000Z
CVE-2016-10859 
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:36:49.000Z
CVE-2016-10860 
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:35:28.000Z
CVE-2016-10861 
Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:36:09.000Z
CVE-2016-10862 
Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:14:02.000Z
CVE-2016-10863 
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:02:53.000Z
CVE-2016-10864 
NETGEAR EX7000 V1.0.0.42_1.0.94 devices allow XSS via the SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:48:36.000Z
CVE-2016-10865 
The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery (CSRF) via wp-admin/admin.php?page=lightboxplus, as demonstrated by resultant width XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:35:45.000Z
CVE-2016-10866 
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T17:52:45.000Z
CVE-2016-10867 
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T17:52:16.000Z
CVE-2016-10868 
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:53:00.000Z
CVE-2016-10869 
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:48:52.000Z
CVE-2016-10870 
The google-language-translator plugin before 5.0.06 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:41:02.000Z
CVE-2016-10871 
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:36:16.000Z
CVE-2016-10872 
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:24:31.000Z
CVE-2016-10873 
The wp-database-backup plugin before 4.3.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:56:31.000Z
CVE-2016-10874 
The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:55:42.000Z
CVE-2016-10875 
The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:54:40.000Z
CVE-2016-10876 
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:53:58.000Z
CVE-2016-10877 
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:53:11.000Z
CVE-2016-10878 
The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:52:38.000Z
CVE-2016-10879 
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:44:11.000Z
CVE-2016-10880 
The google-document-embedder plugin before 2.6.1 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:37:49.000Z
CVE-2016-10881 
The google-document-embedder plugin before 2.6.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:37:21.000Z
CVE-2016-10882 
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:34:33.000Z
CVE-2016-10883 
The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:30:40.000Z
CVE-2016-10884 
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:26:45.000Z
CVE-2016-10885 
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:25:55.000Z
CVE-2016-10886 
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:25:29.000Z
CVE-2016-10887 
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:20:27.000Z
CVE-2016-10888 
The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:19:24.000Z
CVE-2016-10889 
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T14:50:58.000Z
CVE-2016-10890 
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:21:36.000Z
CVE-2016-10891 
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:20:54.000Z
CVE-2016-10892 
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:03:04.000Z
CVE-2016-10893 
The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T00:00:00.000Z
CVE-2016-10894 
xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the touchpad once and then clicking with a different finger).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T03:00:37.000Z