iThoughtsHD Map名跨站脚本漏洞

Bugtraq ID:66431 CVE ID:CVE-2014-1826 iThoughtsHD是一款针对iPad设计的超实用的思维导图软件。 iPAD设备上的iThoughtsHD app 4.19存在跨站脚本漏洞，当使用WiFi传输功能时，允许远程攻击者利用漏洞通过特制的map名注入任意WEB脚本或HTML。当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 iThoughtsHD app 4.19 for iOS 目前没有详细解决方案提供： http://www.ithoughts.co.uk/iThoughtsHD/Welcome.html?...

CVE-2014-1826

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1826

The CVE-2014-1826 entry concerns iThoughtsHD for iOS (iPad) version 4.19, where the WiFi Transfer feature allows cross-site scripting via a crafted map name. The vulnerability is an XSS in the map name handling, enabling remote attackers to inject arbitrary web script or HTML when the map name is...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt13

Nov. 24, 2013 Led 2.6.32-alt13 - 2.6.32-431.el6: + CVE-2013-0228 + CVE-2013-0268 + CVE-2013-0343 + CVE-2013-0349 + CVE-2013-0871 + CVE-2013-0913 + CVE-2013-1767 + CVE-2013-1773 + CVE-2013-1774 + CVE-2013-1792 + CVE-2013-1796 + CVE-2013-1797 + CVE-2013-1798 + CVE-2013-1826 + CVE-2013-1827 +...

Oracle Linux 5 : kernel (ELSA-2013-0747)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0747 advisory. - virt xen-netback: backports Andrew Jones 910884 910885 CVE-2013-0216 - virt xen-netback: netifschedulable should take a netif Andrew Jones 910884...

Oracle Linux 6 : kernel (ELSA-2013-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0744 advisory. - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - virt kvm: do not GP on unaligned MSRKVMSYSTEMTIME writ...

Ubuntu: Security Advisory (USN-1824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-1826-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN18261.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for linux USN-1826-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1829-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

Ubuntu 12.10 : linux vulnerability (USN-1826-1)

An flaw was discovered in the Linux kernel's perfevents interface. A local user could exploit this flaw to escalate privileges on the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1824-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

kernel security and bug fix update

kernel 2.6.18-348.4.1 - virt xen-netback: backports Andrew Jones 910884 910885 CVE-2013-0216 - virt xen-netback: netifschedulable should take a netif Andrew Jones 910884 910885 CVE-2013-0216 - virt pciback: rate limit error mess from pcibackenablemsi Igor Mammedov 910876 910877 CVE-2013-0231 - ne...

CVE-2013-1826

The CVE-2013-1826 issue affects the Linux kernel’s xfrm_state_netlink() in net/xfrm/xfrm_user.c prior to 3.5.7. The vulnerability stems from not properly handling error conditions in dump_one_state() calls, which can allow a local user with CAP_NET_ADMIN to gain privileges or trigger a denial of ...

Ubuntu: Security Advisory (USN-1646-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1644-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1647-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1645-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1648-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

USN-1646-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

USN-1645-1: Linux kernel (OMAP4) vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit...