Buildbot vulnerable to cross-site scripting

Multiple cross-site scripting XSS vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959...

GHSA-MJ3X-WPRP-MVJ9 Buildbot vulnerable to cross-site scripting

Multiple cross-site scripting XSS vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959...

buildbot-netauth (0.1.0) potentially affected by CVE-2009-2959 via buildbot (4.0.4)

buildbot PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on buildbot and may be impacted: - buildbot-netauth 0.1.0 Source cves: CVE-2009-2959 Source advisory: OSV:GHSA-JQQH-999X-W26W...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.qos.logback:logback-access (>=${parent.version}, <=0.8) +480 more potentially affected by CVE-2009-1523 via org.mortbay.jetty:jetty (>=6.0.0beta1, <=6.1.16)

org.mortbay.jetty:jetty MAVEN version =6.0.0beta1, =1.0-beta, =$parent.version, =0.6, =1.0, =4.2.1, =4.3.0, =4.3.0, =4.2.1, =4.2.1, =4.3.0, =0.5, =0.5, =0.60.3, =0.70 - com.github.jango89:hibernate-minimal-logger 0.0.7 and more Source cves: CVE-2009-1523 Source advisory: OSV:GHSA-9986-W5H5-VW59...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.qos.logback:logback-access (>=${parent.version}, <=0.8) +480 more potentially affected by CVE-2009-1523 via org.mortbay.jetty:jetty (>=6.0.0beta1, <=6.1.16)

org.mortbay.jetty:jetty MAVEN version =6.0.0beta1, =1.0-beta, =$parent.version, =0.6, =1.0, =4.2.1, =4.3.0, =4.3.0, =4.2.1, =4.2.1, =4.3.0, =0.5, =0.5, =0.60.3, =0.70 - com.github.jango89:hibernate-minimal-logger 0.0.7 and more Source cves: CVE-2009-1523 Source advisory: GHSA-9986-W5H5-VW59...

MoinMoin Cross-site Scripting (XSS) vulnerability

Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 an AttachFile sub-action in the errormsg function or 2 multiple vectors related to package file errors in the uploadform...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6) +4325 more potentially affected by CVE-2009-1190 via org.springframework:spring-core (>=1.2, <=2.5.6.sec03)

org.springframework:spring-core MAVEN version =1.2, =1.3, =0.0.1, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.13.8 and more Source cves: CVE-2009-1190 Source advisory: OSV:GHSA-WJJR-H4WH-W6VV...

ai.mattmann.mnemosyne:cas-cli (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:cas-crawler (>=1.11.0, <=1.13.8) +3170 more potentially affected by CVE-2009-1190 via org.springframework:spring-core (>=1.2, <=2.5.6)

org.springframework:spring-core MAVEN version =1.2, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =0.3, =0.4 and more Source cves: CVE-2009-1190 Source advisory: GHSA-WJJR-H4WH-W6VV...

org.apache.camel:camel-xmlsecurity (>=2.0-m1, <=2.5.0), org.apache.cxf.dosgi.samples:cxf-dosgi-ri-samples-greeter-client (1.0) +71 more potentially affected by CVE-2009-0217 via org.apache.santuario:xmlsec (1.4.2)

org.apache.santuario:xmlsec MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.santuario:xmlsec and may be impacted: - org.apache.camel:camel-xmlsecurity =2.0-m1, =2.0.10, =2.0.10, =2.0.10, =2.0.10, =2.0.10, =2.0.10, =2.2.2 ...

Slackware: Security Advisory (SSA:2009-342-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20090818-bgp)

According to its self-reported version, Cisco IOS XR Software with BGP enabled is affected by the following vulnerabilities: - Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS...

Rockwell Automation ControlLogix Link Following (CVE-2009-0473)

Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. This plugin only works with Tenable.ot. Please visi...

Rockwell Automation Micrologix Privilege escalation and Denial of Service (CVE-2009-3739)

Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors. This plugin only works with Tenable.ot. Please visit...

Rockwell Automation ControlLogix Exposure of Sensitive Information to an Unauthorized Actor (CVE-2009-0474)

The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain internal web page information and internal information about the module via unspecified vectors. NOTE: this may overlap CVE-2002-1603. This plugin only works with...

Rockwell Automation ControlLogix Cross-site Scripting (CVE-2009-0472)

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

Reolink RLC-410W "factory" binary firmware update vulnerability

Summary A firmware update vulnerability exists in the "factory" binary of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions Reolink...

VUPlayer 2.49 Buffer Overflow

Exploit Title: VUPlayer 2.49 - '.wax' Local Buffer Overflow DEP Bypass Date: 26/06/2021 Exploit Author: Bryan Leong Vendor Homepage: http://www.vuplayer.com/ Software Link: Null Version: VUPlayer 2.49 Tested on: Windows 7 x64 CVE : CVE-2009-0182 VUPlayer 2.49 Local Buffer Overflow to Arbitrary Co...

VUPlayer 2.49 - (.wax) Local Buffer Overflow (DEP Bypass) Exploit

Exploit Title: VUPlayer 2.49 - '.wax' Local Buffer Overflow DEP Bypass Exploit Author: Bryan Leong Vendor Homepage: http://www.vuplayer.com/ Software Link: Null Version: VUPlayer 2.49 Tested on: Windows 7 x64 CVE : CVE-2009-0182 VUPlayer 2.49 Local Buffer Overflow to Arbitrary Code Execution...

VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)

Exploit Title: VUPlayer 2.49 - '.wax' Local Buffer Overflow DEP Bypass Date: 26/06/2021 Exploit Author: Bryan Leong Vendor Homepage: http://www.vuplayer.com/ Software Link: Null Version: VUPlayer 2.49 Tested on: Windows 7 x64 CVE : CVE-2009-0182 VUPlayer 2.49 Local Buffer Overflow to Arbitrary Co...

SSL/TLS: Renegotiation MITM Vulnerability (CVE-2009-3555)

The remote SSL/TLS service is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...