CVE-2018-1384

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135...

CVE-2016-1384

The CVE-2016-1384 entry describes a Cisco NTP Subsystem vulnerability in Cisco IOS (15.1/15.5) and IOS XE (3.2–3.17) where missing authorization checks on certain NTP packets allow an unauthenticated, remote attacker to modify the device time. This could impact timekeeping and trust; exploit stat...

Gentoo Security Advisory GLSA 201601-02

Gentoo Linux Local Security Checks GLSA 201601-02 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201601-02 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201601-02 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attack can use multiple vectors to execu...

Oracle: Security Advisory (ELSA-2012-1384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : webkitgtk (SUSE-SU-2015:0688-1)

This update fixes the following security issues : - Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes:...

CVE-2015-1384

Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...

CVE-2015-1384

The CVE-2015-1384 case covers a Cross-Site Scripting (XSS) flaw in the WordPress Banner Effect Header plugin (v1.2.7 and earlier). The issue stems from insufficient filtering of input to the banner_effect_divid parameter on the BannerEffectOptions page (wp-admin/options-general.php), enabling an ...

CVE-2015-1384

Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...

Banner Effect Header Security Advisory - XSS Vulnerability - CVE-2015-1384

Information ------------ Advisory by Netsparker. Name: XSS Vulnerability in Banner Effect Header Affected Software : Banner Effect Header Affected Versions: 1.2.7 and possibly below Vendor Homepage : https://wordpress.org/plugins/banner-effect-header/ Vulnerability Type : Cross-site Scripting...

Banner Effect Header 1.2.7 Cross Site Scripting

Information ------------ Advisory by Netsparker. Name: XSS Vulnerability in Banner Effect Header Affected Software : Banner Effect Header Affected Versions: 1.2.7 and possibly below Vendor Homepage : https://wordpress.org/plugins/banner-effect-header/ Vulnerability Type : Cross-site Scripting...

Fedora 21 : webkitgtk-2.4.8-1.fc21 / webkitgtk3-2.4.8-1.fc21 (2015-0500)

Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes: CVE-2014-1344, CVE-2014-1384, CVE-2014-1385,...

WebKit-gtk -- Multiple vulnerabilities

Webkit release team reports: This release fixes the following security issues: CVE-2014-1344, CVE-2014-1384, CVE-2014-1385, CVE-2014-1386, CVE-2014-1387, CVE-2014-1388, CVE-2014-1389, CVE-2014-1390...

Adobe Shockwave Player <= 12.0.0.112 Multiple Vulnerabilities (APSB13-12) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 12.0.0.112. It is, therefore, affected by the following vulnerabilities : - An unspecified buffer overflow exists. CVE-2013-1383 - Two unspecified memory corruption errors exist. CVE-2013-1384,...

APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6 Safari 6.1.6 and Safari 7.0.6 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.4 Impact...

CVE-2014-1384

WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367...

CVE-2014-1384

CVE-2014-1384 is listed as a WebKit-related vulnerability associated with WebKitGTK+ platforms. The connected documents identify it as one of multiple WebKitGTK+ vulnerabilities that can lead to remote code execution or denial of service via crafted web content, with affected software including W...

CVE-2014-1384

Removed by vendor...

Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 (Mac OS X)

This host is installed with Adobe Shockwave player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvuln01apr13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 Mac OS X Authors: Arun...

FreeBSD : linux-flashplugin -- multiple vulnerabilities (15236023-a21b-11e2-a460-208984377b34)

Adobe reports : These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...