Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | wordpress | 3.6.1+dfsg-1~deb7u4 |
Vulnerabilities 6
-
High —
getID3 is vulnerable to XML External Entity (XXE)
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
-
Unscored —
wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on wh…
-
Unscored —
wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and u…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enab…
-
Unscored —
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, pe…
-
Unscored —
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, do…