|
282361
|
6.1 |
MEDIUM
Network
|
movies_project
|
movies
|
Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/d…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4539
|
2024-11-21 11:10 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282362
|
6.1 |
MEDIUM
Network
|
czepol
|
wp-planet
|
Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4592
|
2024-11-21 11:10 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282363
|
6.1 |
MEDIUM
Network
|
conversador_project
|
conversador
|
Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4519
|
2024-11-21 11:10 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282364
|
6.1 |
MEDIUM
Network
|
cybercompay
|
swipehq-payment-gateway-wp-e-commerce
|
Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web sc…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4559
|
2024-11-21 11:10 |
2019-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282365
|
6.1 |
MEDIUM
Network
|
winwar
|
wp_ebay_product_feeds
|
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web scr…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4525
|
2024-11-21 11:10 |
2019-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282366
|
6.1 |
MEDIUM
Network
|
easy_career_openings_project
|
easy_career_openings
|
Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4523
|
2024-11-21 11:10 |
2019-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282367
|
6.5 |
MEDIUM
Network
|
ibm
|
infosphere_biginsights
|
IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029.
|
CWE-200
Information Exposure
|
CVE-2014-4782
|
2024-11-21 11:10 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282368
|
6.5 |
MEDIUM
Network
|
piwigo
|
piwigo
|
Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users v…
|
CWE-352
Origin Validation Error
|
CVE-2014-4613
|
2024-11-21 11:10 |
2018-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282369
|
6.1 |
MEDIUM
Network
|
coppermine-gallery
|
coppermine_photo_gallery
|
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web scr…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4612
|
2024-11-21 11:10 |
2018-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282370
|
7.5 |
HIGH
Network
|
huawei
|
s9300_firmware
s9700_firmware
s7700_firmware
s5300_firmware
s5700_firmware
s6300_firmware
s6700_firmware
ar150_firmware
ar160_firmware
ar200_firmware
ar1200_firmware
…
|
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, A…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4705
|
2024-11-21 11:10 |
2018-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
