Mageia: Security Advisory (MGASA-2016-0034)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1503

Cross-site scripting XSS vulnerability in Six Apart formerly Six Apart KK Movable Type MT Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section...

CVE-2012-1503

Movable Type Pro 5.13en (MT Pro 5.13) has a Cross-Site Scripting (XSS) vulnerability in the comment section that allows remote attackers to inject arbitrary script/HTML. Descriptions across sources describe it as a stored XSS issue, with exploitation evidenced by multiple external advisories and ...

CVE-2012-1503

Cross-site scripting XSS vulnerability in Six Apart formerly Six Apart KK Movable Type MT Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section...

Oracle WebCenter Content (April 2013 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by multiple vulnerabilities in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid69478;...

CVE-2013-1503

CVE-2013-1503 affects Oracle WebCenter Content’s Content Server component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via unknown vectors related to Content Server. Connected document...

Movable Type Pro 5.13en - Persistent Cross-Site Scripting

Movable Type Pro 5.13en - Persistent Cross-Site Scripting -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS, JavaScript Injection, Vendor Unresponsive,...

Movable Type Pro 5.13en - Persistent Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS, JavaScript Injection, Vendor Unresponsive, Full Disclosure Introduction Movable Type MT started as on...

Ubuntu: Security Advisory (USN-1503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : rhythmbox vulnerability (USN-1503-1)

Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu. Note that Tenable Network Security...

Liferay Portal < 6.0.6 Multiple Vulnerabilities

According to its self-reported version number, the installation of Liferay Portal hosted on the remote web server is affected by multiple vulnerabilities : - An arbitrary file download vulnerability exists when Apache Tomcat is used, which allows remote, authenticated users to download arbitrary...

Fedora Update for kernel FEDORA-2012-1503

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-1503 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2011-1503

The CVE-2011-1503 issue affects Liferay Portal Community Edition (CE) 5.x and 6.x prior to 6.0.6 GA. The XSL Content portlet allows remote authenticated users to read arbitrary XSL and XML files via a file:/// URL, indicating an information disclosure vulnerability within the portlet when deploye...

CVE-2011-1503

The XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary 1 XSL and 2 XML files via a file:/// URL...

Google Chrome Multiple Vulnerabilities (win)

This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnapr10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Madhuri D Updated By: Madhuri D on 2010-05-10...

CVE-2010-1503

Cross-site scripting XSS vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://net-internals URI...

CVE-2010-1503

CVE-2010-1503 describes a cross-site scripting (XSS) vulnerability in Google Chrome prior to 4.1.249.1059, where an attacker could inject arbitrary script/HTML via vectors related to the chrome://net-internals URI. The affected product is Google Chrome (versions earlier than 4.1.249.1059). The vu...

CVE-2010-1503

Cross-site scripting XSS vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://net-internals URI...

CentOS Security Advisory CESA-2009:1503 (gpdf)

The remote host is missing updates to gpdf announced in advisory CESA-2009:1503. CESA-2009:1503 66068 2 $Id: ovcesa20091503.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1503 gpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1503 (gpdf)

The remote host is missing updates to gpdf announced in advisory CESA-2009:1503. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...