CVE-2012-1252

CVE-2012-1252 affects RSSOwl prior to 2.1.1 and is an XSS vulnerability where an attacker can cause arbitrary JavaScript/HTML execution in a user’s browser via feeds. The root cause is improper processing during HTML output based on feed information. Public references in connected documents inclu...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : tomcat6 vulnerabilities (USN-1252-1)

It was discovered that Tomcat incorrectly implemented HTTP DIGEST authentication. An attacker could use this flaw to perform a variety of authentication attacks. CVE-2011-1184 Polina Genova discovered that Tomcat incorrectly created log entries with passwords when encountering errors during JMX...

CentOS Update for ntp CESA-2009:1039 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing

No description provided by source. Name: Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing Information \ Disclosure Vulnerability Author: Adi Cohen of IBM Rational Application Security [email protected] Date: June 14, 2011 Risk: Medium CVE: CVE-2011-1252 Introduction ------------- The...

CVE-2011-1252

Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...

CVE-2011-1252

Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...

CVE-2011-1252

CVE-2011-1252 corresponds to a cross-site scripting vulnerability in the toStaticHTML SafeHTML function used by Internet Explorer 7/8 and several Microsoft SharePoint-related products (SharePoint Server 2007 SP2, SharePoint Server 2010 SP1, Groove Server 2010, Windows SharePoint Services 3.0 SP2,...

Microsoft Internet Explorer toStaticHTML Cross-Site-Scripting (MS11-050; CVE-2011-1252)

An information disclosure vulnerability exists in the way that Internet Explorer handles content using specific strings when sanitizing HTML. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could allow information disclosure if a user viewed the Web...

MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

Microsoft Office Excel String Variable Code Execution (MS10-038; CVE-2010-1252)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The common extension used for Microsoft Excel documents is .xls or .xlw...

MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)

The remote host contains a version of Microsoft Office Excel 2002, Microsoft Office Excel 2003, Microsoft Office Excel 2007, Microsoft Office Excel Viewer, or Microsoft Office Compatibility Pack that is affected by several vulnerabilities. If an attacker can trick a user on the affected system in...

CVE-2010-1252

CVE-2010-1252 is a remote code execution vulnerability in Microsoft Office Excel, specifically affecting Excel 2002 SP3 and Office 2004 for Mac. The flaw stems from how Excel handles a crafted Excel file (String Variable Vulnerability) and could allow an attacker to execute arbitrary code with th...

Fedora Core 10 FEDORA-2009-13121 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-13121. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SLES10: Security update for xntp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xntp xntp-doc More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

SLES9: Security update for xntp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xntp xntp-doc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5049935 within t...

SLES9: Security update for xntp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xntp xntp-doc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5049935 within t...

SuSE9 Security Update : xntp (YOU Patch Number 12415)

This update fixes : - a remote buffer overflow in xntp/ntp which can be exploited when autokey is enabled to execute arbitrary code. CVE-2009-1252 - a buffer overflow in ntpd that can be triggered by a malicious server. CVE-2009-0159 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

openSUSE Security Update : ntp (ntp-862)

This update fixes a remote buffer overflow in xntp/ntp which can be exploited when autokey is enabled to execute arbitrary code. CVE-2009-1252 This upfate fixes a buffer overflow in ntpd that can be triggered by a malicious server. CVE-2009-0159 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : ntp (ntp-862)

This update fixes a remote buffer overflow in xntp/ntp which can be exploited when autokey is enabled to execute arbitrary code. CVE-2009-1252 This upfate fixes a buffer overflow in ntpd that can be triggered by a malicious server. CVE-2009-0159 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Fedora Core 11 FEDORA-2009-5674 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-5674. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...