Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Meta Component: Facebook Clear all filters
TI-2021-06509 CVE-2021-24217 · GHSA-w6px-4fhm-xxgc

Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain

Priority MEDIUM 41

The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0352 Published 2021-04-12 Fixed in 3.0.0 CWE-502
TI-2014-05258 CVE-2014-6392 · GHSA-gr4p-p93w-7rc9

Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00942 Published 2014-09-15 No fix listed CWE-79
TI-2008-00628 CVE-2008-0660 · GHSA-fffx-94h7-8772

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control…

Priority HIGH 67

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remot…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.37762 Published 2008-02-08 No fix listed CWE-119