73 matches found
Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution
Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...
Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution
Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...
Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution
Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...
CVE-2011-1969
CVE-2011-1969 affects Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 through the MicrosoftClient.jar Java applet. The issue arises because the signed Java applet loads unsigned Java classes, which can be exploited to execute arbitrary code on client machin...
MS11-079: Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641)
The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities in the Web Monitor component : - An HTTP response splitting vulnerability in ExcelTable.asp. CVE-2011-1895 - A reflected XSS in ExcelTable.asp. CVE-2011-1896 - A reflected XSS in Default.as...
CVE-2010-1969
HP Virtual Connect Enterprise Manager for Windows is affected by a Cross-site Scripting (XSS) vulnerability in all versions prior to 6.1. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors. HP’s security bulletin SSRT100165 (HPSBMA02551) states that an up...
CVE-2009-1969
CVE-2009-1969 is an Oracle Database vulnerability in the Auditing component affecting 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. The issue allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents confirm affected products/versions and the...
CVE-2008-1969
CVE-2008-1969 affects Cezanne 6.5.1 and 7, with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via various URL and form parameters (e.g., CFLookUP.asp inputs; CznCommon/CznCustomContainer.asp inputs; Home.asp CFTARGET; CVCard.asp PersonOid; PayrollCard.as...
CVE-2007-1969
CVE-2007-1969 describes an XSS vulnerability in Sam Crew MyBlog, specifically in admin/modify.php where the id parameter can be manipulated to inject arbitrary web script/HTML by remote attackers. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with impact confined to confidentiality and...
CVE-2006-1969
CVE-2006-1969 corresponds to a cross-site scripting (XSS) vulnerability in the search/search.cgi component of an unspecified KCScripts script (likely Search Engine or Site Search), distributed with Portal Pack 6.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HT...
CVE-2002-1969
Technical details about CVE-2002-1969 are not publicly available in the provided documents. No concrete exploit, affected versions, or remediation are disclosed here; monitor for updates.
CVE-2005-1969
The CVE-2005-1969 entry describes a cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 that allows remote attackers to inject arbitrary web script or HTML and hide activities in log files by inserting an HTML comment "
