74 matches found
1995-2015.undo.net XSS vulnerability
Open Bug Bounty ID: OBB-401650 Description| Value ---|--- Affected Website:| 1995-2015.undo.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-1995
HP System Management Homepage (SMH) is affected prior to version 7.5.4. The OpenVAS/Nessus entries indicate an unspecified remote code execution vulnerability that can allow a remote attacker to take control of the system. No detailed exploit vectors or root-cause are provided in the connected do...
CVE-2015-1995
Multiple cross-site scripting XSS vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allow remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-1995
IBM QRadar Incident Forensics 7.2.x (pre-7.2.5 Patch 5) is affected by cross-site scripting via specially crafted URLs, enabling remote attackers to inject arbitrary script/HTML. Root cause: improper input validation in the UI paths; impact includes potential cookie-based credential exposure. Rem...
Oracle: Security Advisory (ELSA-2007-0389)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...
CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)
Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
CVE-2014-1995
Cross-site scripting XSS vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1995
CVE-2014-1995 is a reported XSS in Cybozu Garoon’s Map search. Affected: Cybozu Garoon 2.x–3.x (up to 3.7 SP3 per JVN) with vulnerability in the Map search function that may allow remote authenticated users to inject arbitrary script via unspecified vectors (CWE-79). Impact: arbitrary script exec...
openSUSE Security Update : libXi (openSUSE-SU-2013:1033-1)
This update of libXi fixes several integer overflow issues. - U0001-integer-overflow-in-XGetDeviceControl-CVE-2013-19 84-.patch, U0002-integer-overflow-in-XGetFeedbackControl-CVE-2013- 198.patch, U0003-integer-overflow-in-XGetDeviceDontPropagateList-C VE-.patch,...
SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)
This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...
SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)
This update of xorg-x11-libs fixes several integer and buffer overflow issues. bnc815451, bnc821663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...
CVE-2013-1995
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function...
CVE-2013-1995
CVE-2013-1995 affects the X.Org X11 libXi runtime library (XListInputDevices) where an unexpected sign extension could trigger a memory allocation misstep and a buffer overflow. Refs indicate impact is the potential execution of arbitrary code with the user’s privileges if an X11 server supplies ...
Ubuntu Update for libxi USN-1859-1
Check for the Version of libxi OpenVAS Vulnerability Test $Id: gbubuntuUSN18591.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for libxi USN-1859-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
Fedora Update for libXi FEDORA-2013-9108
Check for the Version of libXi OpenVAS Vulnerability Test Fedora Update for libXi FEDORA-2013-9108 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora 19 : libXi-1.7.1-4.20130524git661c45ca1.fc19 (2013-9046)
Udpate to git snapshot to fix CVE-2013-1984, CVE-2013-1995, CVE-2013-1998 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] [DSA 2683-1] libxi security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2683-1] libxi security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...