CVE-2018-1496

IBM Content Navigator is affected by a cross-site scripting vulnerability (CVE-2018-1496) in versions 2.0.3 and 3.0 Continuous Delivery. The issue allows embedded arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM’s security bulletin no...

Solaris 10 (sparc) : 149165-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel/IO. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

CVE-2017-1496

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1496

CVE-2017-1496 affects IBM Sterling B2B Integrator Standard Edition (5.2.x). A cross-site scripting vulnerability exists in the Queue Watcher component that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credential disclosure within a trusted session. The...

semrush.com XSS vulnerability

Vulnerable URL: https://www.semrush.com/info/eb';alert/OPENBUGBOUNTY/;'ay.com+full+search Details: Description| Value ---|--- Patched:| Yes, at 18.09.2017 Latest check for patch:| 18.09.2017 21:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1496 VIP website...

Ubuntu: Security Advisory (USN-3150-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-1496

CVE-2016-1496 concerns a DoS in Huawei P8 graphics driver. The issue affects Huawei P8 variants running GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230. The vulnerability arises...

Oracle: Security Advisory (ELSA-2007-0347)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1496

The CVE concerns Motorola Scanner SDK. Affected components are CoreScanner.exe, rsmdriverproviderservice.exe, and ScannerService.exe. The root cause is weak file permissions (ACLs) on installed directories, enabling local attackers to escalate privileges and execute arbitrary code with SYSTEM pri...

Oracle Solaris Critical Patch Update : apr2013_SRU0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Remote Execution Service. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability...

tmux '-S' Option Incorrect SetGID Privilege Escalation Vulnerability

No description provided by source. --------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability Date: 11.04.2011...

WebCalendar <= 1.2.4 (install/index.php) Remote Code Execution

No description provided by source. ?php / ----------------------------------------------------------------------- WebCalendar = 1.2.4 install/index.php Remote Code Executionn Exploit ----------------------------------------------------------------------- author..........: Egidio Romano aka EgiX...

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Mar 2014) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9049)

Mozilla Firefox was updated to 24.4.0ESR release, fixing various security issues and bugs : - Mozilla developers and community identified identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of...

CVE-2014-1496

CVE-2014-1496 affects Mozilla Firefox (up to 28.0) and related Mozilla suite components (Firefox ESR 24.x up to 24.4, Thunderbird up to 24.4, SeaMonkey up to 2.25). The vulnerability allows local users to gain privileges by modifying the extracted Mar contents during an update, constituting a loc...

KLA10120 Multiple vulnerabilities in Mozilla

Multiple critical vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1...

Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)

See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

CVE-2013-1496

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498...

CVE-2013-1496

CVE-2013-1496 pertains to Solaris kernel/IO vulnerabilities in Oracle Sun Solaris 10 and 11. The connected Nessus entries identify affected platforms as Solaris 10/11 (x86 and SPARC) with exploitation requiring local access, potentially causing an OS hang or repeated crashes (complete DOS). Affec...

Ubuntu Update for openoffice.org USN-1496-1

Ubuntu Update for Linux kernel vulnerabilities USN-1496-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14961.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for openoffice.org USN-1496-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...