Archive
23 September 2017
Vulnerabilities first published on this day (UTC), newest first.
11 results · Feed
-
Unscored —
Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme fi…
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual ed…
-
Unscored —
Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus d…
-
Unscored —
Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.
-
Unscored —CVE-2017-14725 Scanner template
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/u…
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchiv…
-
Unscored —
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) a…
-
Unscored —
Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or…
-
Unscored —
Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template …
-
Unscored —
logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffe…