|
255091
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14720
|
2024-11-21 12:13 |
2017-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255092
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
|
CWE-22
Path Traversal
|
CVE-2017-14719
|
2024-11-21 12:13 |
2017-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255093
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14718
|
2024-11-21 12:13 |
2017-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255094
|
7.8 |
HIGH
Local
|
cyberlink
|
labelprint
|
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) a…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14627
|
2024-11-21 12:13 |
2017-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255095
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14717
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255096
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14716
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255097
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14715
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255098
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14714
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255099
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14713
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255100
|
5.4 |
MEDIUM
Network
|
telaxius
|
epesi
|
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14712
|
2024-11-21 12:13 |
2017-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|