CVE-2013-3893

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll...

CVE-2013-5025

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

CVE-2013-5023

The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files...

CVE-2013-5025

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

CVE-2013-5023: Undefined Security Weakness

The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files...

CVE-2013-5024: Undefined Security Weakness

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

PT-2013-5334

Name of the Vulnerable Software and Affected Versions National Instruments LabWindows/CVI versions 2012 SP1 and earlier National Instruments LabVIEW versions 2012 SP1 and earlier Description The issue allows remote attackers to cause a denial of service by triggering the display of local .chm fil...

PT-2013-5335

Name of the Vulnerable Software and Affected Versions National Instruments NI .NET Class Library Help versions prior to the version that includes the fix for this issue Description The issue allows remote attackers to obtain sensitive information about the existence of registry keys via crafted...

PT-2013-5336

Name of the Vulnerable Software and Affected Versions National Instruments LabWindows/CVI versions prior to 2013 Description The issue concerns an ActiveX control in the exlauncher.dll file within the Help subsystem, which can be exploited by remote attackers to cause a denial of service. This is...

CVE-2013-5025: Undefined Security Weakness

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

PT-2013-1799

Name of the Vulnerable Software and Affected Versions Juniper Secure Access SA with IVE OS versions prior to 7.1r13 Juniper Secure Access SA with IVE OS versions 7.2.x prior to 7.2r7 Juniper Secure Access SA with IVE OS versions 7.3.x prior to 7.3r2 Description A cross-site scripting XSS issue...

CVE-2012-5460: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help page in Juniper Secure Access SA with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter...

CVE-2013-3979

CVE-2013-3979: Multiple XSS vulnerabilities in the Web Client’s help pages (Web\Content\Help) of IBM Cognos Command Center (Star Command Center/Star Analytics) prior to version 10.1, triggered when using Internet Explorer. Exploitation is via unspecified vectors by remote authenticated users; imp...

PT-2013-4770

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions prior to 10.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the help pages of the Web Client. These vulnerabilities allow remote authenticated users to inject arbitrary w...

CVE-2013-3778

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

CVE-2013-3778

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

CVE-2013-3778

Oracle E-Business Suite versions 12.0.6 and 12.1.3 are affected in the Oracle Applications Technology Stack under the Help component. The vulnerability is described as an unspecified issue that could allow remote integrity impact via unknown vectors; no exploit details are provided. The connected...

PT-2013-4617

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.0.6 through 12.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Help in the Oracle Applications Technology Stack component...

CVE-2013-3778: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...