PT-2014-7863

Name of the Vulnerable Software and Affected Versions KENT-WEB Clip Board versions 2.91 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when running certain versions of Internet Explorer. Recommendatio...

CVE-2014-7258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

KENT-WEB Clip Board vulnerable to cross-site scripting

Overview KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Sen UENO of Tricorder Co. Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

JVN#12798709: KENT-WEB Clip Board vulnerable to cross-site scripting

KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

CVE-2014-6692

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6692

The CVE-2014-6692 issue affects the Android app Kingsoft Clip (Office Tool) cn.wps.clip, version 1.5.1. The underlying flaw is that the app does not verify X.509 certificates from SSL servers, enabling a man‑in‑the‑middle attacker to spoof servers and potentially exfiltrate sensitive information ...

CVE-2014-6692

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6692: Undefined Security Weakness

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7370

Name of the Vulnerable Software and Affected Versions Kingsoft Clip Office Tool version 1.5.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...

clip bucket 2.6 - Multiple Vulnerabilities

No description provided by source. Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : No...

Microsoft Clip Art Gallery 5.0 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1034/info A vulnerability exists within the Microsoft Clip Art Gallery, where a remote user can crash the Clip Art application or possibly execute arbitrary code. Clip art can be downloaded from any website and incorporat...

Clip Bucket <= 1.7.1 Insecure Cookie Handling Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...

CVE-2013-3649

Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

CVE-2013-3649

The CVE-2013-3649 issue affects KENT-WEB CLIP-MAIL (before version 3.4). The root cause is a cross-site scripting (XSS) vulnerability in the webpage output of strings entered in a form, triggered when using Internet Explorer 7 or earlier. Affected products are CLIP-MAIL versions up to 3.3 (per JV...

CVE-2013-3649

Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

CVE-2013-3649: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

PT-2013-4542

Name of the Vulnerable Software and Affected Versions KENT-WEB CLIP-MAIL versions prior to 3.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via an unspecified form field when Internet Explorer 7 or earlier is used. Recommendations For...

CLIP-MAIL vulnerable to cross-site scripting

Overview CLIP-MAIL provided by KENT-WEB contains an issue in the webpage output of strings entered in the form, which may result in a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version...