Cross site scripting

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

PT-2012-3136

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 6.x through 6.0.14 Zimbra Collaboration Suite ZCS versions 7.x through 7.1.2 Description A cross-site scripting XSS issue exists in the Zimbra Web Client, specifically in the zimbra/h/calendar component...

Zimbra Cross Site Scripting

Exploit Title: Zimbra Cross Site Scripting Date: 12.02.2012 Author: Sony Software Link: http://www.zimbra.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html...

[SECURITY] Fedora 14 Update: phpldapadmin-1.2.1.1-2.20111006git.fc14

PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...

Oracle Hyperion Financial Management ActiveX File Upload

Added: 11/15/2011 BID: 50476 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for scripting and...

Serv-U Web客户端跨站脚本执行漏洞

BUGTRAQ ID: 50503 Serv-U包含简单的基于浏览器的传输客户端。 Serv-U Web Client在实现上存在跨站脚本执行漏洞，某些发给Web客户端的非特定输入在返回给用户之前没有正确过滤，攻击者可利用此漏洞在受影响站点的用户浏览器中执行任意HTML和脚本代码，窃取cookie身份验证凭证。 RhinoSoft Serv-U Web Client 9.1 .0 RhinoSoft Serv-U Web Client 9.0.0.5 RhinoSoft Serv-U Web Client 11.0.0.3 厂商补丁： RhinoSoft ---------...

Changed block tracking cannot be enabled: virtual hardware version 7 or later required

Challenge The backup or replication job is processed slower than expected and gives the warning message "changed block tracking cannot be enabled: virtual hardware version 7 or later required." The job works without Changed Block Tracking, and the "changed block tracking cannot be enabled: virtua...

ASPR #2011-08-18-1: Remote Binary Planting in Mozilla Firefox

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-08-18-1 ------------------------------------------------------------------------- ASPR 2011-08-18-1: Remote Binary Planting in Mozilla Firefox...

DEBIAN-CVE-2011-1498

Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header...

Low: Red Hat Security Advisory: squid security and bug fix update

An updated squid package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

CVE-2011-2142

The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors...

Default credentials

The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors...

CVE-2011-2142

The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors...

CVE-2011-2142

The CVE-2011-2142 issue affects IBM Datacap Taskmaster Capture 8.0.1 prior to FP1, where the Web Client Service requires a cleartext password. The available data (NVD entry) states the impact and vectors as unspecified, with CVSS v2 base score 5.0 (Medium) and a network attack vector with no auth...

PT-2011-3631

Name of the Vulnerable Software and Affected Versions IBM Datacap Taskmaster Capture version 8.0.1 before FP1 Description The Web Client Service in IBM Datacap Taskmaster Capture requires a cleartext password, which has unspecified impact and attack vectors. Recommendations For IBM Datacap...

CVE-2011-2142: Undefined Security Weakness

The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors...

ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-1 ------------------------------------------------------------------------- ASPR 2011-02-11-1: Remote Binary Planting in Adobe Reader...

ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-2 ------------------------------------------------------------------------- ASPR 2011-02-11-2: Remote Binary Planting in Adobe Flash Player...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

Code injection

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...