Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

custom website data project custom website data vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2021-38347
The Custom Website Data WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter found in the ~/views/edit.php file which allows malicious users to inject arbitrary web scripts, in versions up to and including 2.2.
Custom Website Data Project Custom Website Data
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
NA
CVE-2009-1687
The JavaScript garbage collector in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 does not properly handle allocation failures, which allows remote malicious users to execute arbitrary code...
Apple Safari 0.8Apple Safari 1.0Apple Safari 2.0.2Apple Safari 2.0.4Apple Safari 3.1.1Apple Safari 1.3Apple Safari 1.3.1Apple SafariApple Safari 3.0.2Apple Safari 3.1Apple Safari 3.1.2Apple Safari 1.3.2Apple Safari 2.0Apple Safari 0.9Apple Safari 3.0.3Apple Safari 3.0Apple Safari 3.0.4Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 3.2.1Apple Safari 3.2.3
NA
CVE-2009-1690
Use-after-free vulnerability in WebKit, as used in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, iPhone OS for iPod touch 1.1 up to and including 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote malicious users to execute arbitrary...
Apple Safari 3.1.1Apple Safari 3.1Apple Safari 3.1.2Apple Safari 1.3.2Apple Safari 2.0Apple Safari 0.9Apple Safari 3.0.3Apple Safari 0.8Apple Safari 1.0Apple Safari 2.0.2Apple Safari 2.0.4Apple Safari 3.0Apple Safari 3.0.4Apple Safari 1.3Apple Safari 1.3.1Apple SafariApple Safari 3.0.2Apple Safari 1.1Apple Safari 1.2Apple Safari 3.2.1Apple Safari 3.2.3Apple Safari 1.0.3
NA
CVE-2009-1698
WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allow...
Apple Safari 3.0.4bApple Safari 2.0.3Apple Safari 3.0.4Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 3.0.0Apple Safari 3.1.0bApple Safari 3.1.0Apple Safari 3.0.1bApple Safari 3.1.2Apple Safari 3.1.1Apple Safari 3.0.2bApple Safari 3.0.2Apple Safari 2.0.4Apple Safari 2.0Apple SafariApple Safari 3.0.0bApple Safari 3.2.0Apple Safari 3.0.3bApple Safari 3.0.3Apple Safari 2.0.0
NA
CVE-2009-1711
WebKit in Apple Safari prior to 4.0 does not properly initialize memory for Attr DOM objects, which allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.
Apple Safari 3.1.1Apple Safari 3.1Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 3.0.2Apple Safari 0.9Apple Safari 1.2Apple Safari 1.3Apple Safari 3.2.3Apple SafariApple Safari 3.1.2Apple Safari 0.8Apple Safari 2.0Apple Safari 2.0.2Apple Safari 3.0.3Apple Safari 3.0Apple Safari 3.0.4Apple Safari 1.0Apple Safari 1.1Apple Safari 2.0.4Apple Safari 3.2.1Apple Safari 1.0.3
NA
CVE-2009-1712
WebKit in Apple Safari prior to 4.0 does not prevent remote loading of local Java applets, which allows remote malicious users to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.
Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 3.2.3Apple SafariApple Safari 3.1.1Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 3.0.2Apple Safari 0.9Apple Safari 3.1Apple Safari 3.1.2Apple Safari 2.0Apple Safari 2.0.2Apple Safari 3.0.3Apple Safari 3.0Apple Safari 0.8Apple Safari 1.0Apple Safari 2.0.4Apple Safari 3.2.1Apple Safari 3.0.4Apple Safari 1.0.3
NA
CVE-2009-1725
WebKit in Apple Safari prior to 4.0.2, as used on iPhone OS prior to 3.1, iPhone OS prior to 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allow...
Apple Safari 3.0.4bApple Safari 2.0.3Apple SafariApple Safari 3.0.4Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 3.0.0Apple Safari 3.1.1Apple Safari 3.1.0bApple Safari 3.0.2Apple Safari 4.0.0bApple Safari 3.1.0Apple Safari 4.0Apple Safari 3.2.2Apple Safari 3.0.3bApple Safari 3.0.0bApple Safari 3.1.2Apple Safari 3.0.3Apple Safari 2.0.4Apple Safari 2.0.0Apple Safari 2.0
NA
CVE-2009-0945
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari prior to 3.2.3 and 4 Public Beta, iPhone OS 1.0 up to and including 2.2.1, iPhone OS for iPod touch 1.1 up to and including 2.2.1, Google Chrome Stable prior to 1.0.154.65, and possibly other prod...
Apple Safari 0.9Apple Safari 1.0.2Apple Safari 1.1.0Apple Safari 1.1Apple Safari 0.8Apple Safari 1.0.3Apple Safari 1.0.0Apple Safari 1.2.0Apple Safari 1.1.1Apple Safari 1.3.0Apple Safari 1.3.2Apple Safari 1.3Apple Safari 2.0.3Apple Safari 3.0.1Apple Safari 3.0.2Apple Safari 3.2Apple Safari 3.2.0Apple Safari 1.0Apple Safari 1.0.0b1Apple Safari 1.2Apple Safari 1.2.4Apple Safari 1.2.5
NA
CVE-2005-2269
Firefox prior to 1.0.5, Mozilla prior to 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote malicious users to modify certain tag properties, possibly leading to execution of arbitr...
Mozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3Mozilla Mozilla 1.5Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7.3Mozilla Mozilla 1.7Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Firefox 1.0.4Mozilla Mozilla 1.3Mozilla Mozilla 1.6Mozilla Mozilla 1.7.5Mozilla Mozilla 1.7.6Mozilla Firefox 0.10Mozilla Firefox 0.10.1Mozilla Firefox 1.0Mozilla Firefox 1.0.1Mozilla Mozilla 1.5.1Mozilla Mozilla 1.7.1Mozilla Firefox 0.9.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
bypassopen redirectCVE-2024-4358CVE-2024-24199CVE-2024-5550CVE-2024-5305CVE-2024-30373CVE-2024-1800deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook