Search vulnerabilities

Expected end of text, found 'ład' (at char 10), (line:1, col:11)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,959

CVE-2017-18513

The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Expresstech
Products
Responsive Menu
CVE-2017-18510

The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wpmudev
Products
Custom Sidebars
CVE-2017-18509

kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution

An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2017-18508

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
3cx
Products
Live Chat
CVE-2017-18507

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
3cx
Products
Live Chat