All CVEs — page 256 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The SecuShare Pro software has an OS Command Injection vulnerability, allowing unauthenticated attackers to inject and execute arbitrary commands on the server, leading to potential full server compromise.
The flaw allows unauthenticated users to execute arbitrary PHP functions or class methods, leading to unauthorized access and potential account takeover, including admin accounts.
The flaw allows unauthenticated attackers to log in as any existing user, including Network Super Admins, by exploiting a bypass in the Ultimate Multisite WordPress plugin before 2.17.0.
The GPTranslate WordPress plugin has a stored XSS vulnerability that allows unauthenticated users to inject malicious scripts into translated pages. This occurs because the plugin doesn't properly restrict who can store translations and fails to escape output when displaying them.