81 matches found
RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.20 (RHSA-2018:1448)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1448 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...
CVE-2017-1448
CVE-2017-1448 affects IBM Emptoris Supplier Lifecycle Management 10.0.x–10.1.x. The vulnerability is an open redirect that could be exploited by an attacker to spoof the displayed URL and redirect victims to a malicious site, enabling phishing and potential data exposure. IBM security bulletin de...
CVE-2016-1448
CVE-2016-1448 affects Cisco WebEx Meetings Server 2.7. A CSRF vulnerability in the administrator/web interface could allow a remote attacker to submit arbitrary requests and hijack the user’s authenticated session, enabling unauthorized operations. Cisco advisory CISCO-SA-20160714-WMS2 notes upda...
CVE-2015-1448
The CVE refers to Siemens Ruggedcom WIN51xx/ WIN52xx/ WIN70xx/ WIN72xx devices where the integrated management service could be exploited remotely to bypass authentication and perform administrative actions. Affected firmware versions before SS4.4.4624.35 (WIN51xx/ WIN52xx) and before BS4.4.4621....
CVE-2014-1448
CVE-2014-1447 describes a race condition in libvirt’s virNetServerClientStartKeepAlive before 1.2.1 that could allow a remote attacker to crash libvirtd (DoS). Public advisories (CVE entries, CentOS/RHSA, Mageia) indicate this issue and recommend upgrading libvirt to patched versions; linked CVE-...
Ubuntu: Security Advisory (USN-1448-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-1448
The CVE-2012-1448 entry affects multiple AV products and parsers (Quick Heal/Cat QuickHeal 11.00, Trend Micro Antivirus 9.120.0.1004, Ikarus Virus Utilities T3 CLI Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti‑Malware 5.1.0.1). The root cause is a CAB file parser flaw th...
Google Chrome multiple vulnerabilities - May11 (Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay11win.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome multiple vulnerabilities - May11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networ...
CVE-2011-1448
Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...
Debian DSA-2092-1 : lxr-cvs - missing input sanitizing
Dan Rosenberg discovered that in lxr-cvs, a code-indexing tool with a web frontend, not enough sanitation of user input is performed; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...
CVE-2010-1448
Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...
CVE-2010-1448
Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...
CVE-2010-1448
Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...
CVE-2010-1448
CVE-2010-1448 is a cross-site scripting (XSS) vulnerability in the LXR Cross Referencer. The flaw resides in the file lib/LXR/Common.pm and affects versions prior to 0.9.8 . An attacker can inject arbitrary web script/HTML by exploiting a string in the search page’s TITLE element. This entry is r...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1448. Reason: This candidate is a duplicate of CVE-2010-1448. Notes: All CVE users should reference CVE-2010-1448 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-1738
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1448. Reason: This candidate is a duplicate of CVE-2010-1448. Notes: All CVE users should reference CVE-2010-1448 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...