CVE-2012-2572

The CVE-2012-2572 entry affects the ThreeWP Email Reflector plugin for WordPress (versions before 1.16). The vulnerability is a Cross-Site Scripting (XSS) flaw in the Subject field of emails, due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML....

CVE-2012-1621

Apache OFBiz 10.04.x prior to 10.04.02 is affected by multiple XSS vulnerabilities. The issues arise from improper handling of user input in error messages and in requests using (1) parameter arrays in freemarker templates, (2) contentId, and (3) mapKey in cms events, plus (4) ajax inputs to getS...

CVE-2012-2569

CVE-2012-2569 concerns Synametrics Technologies Xeams 4.4 Build 5720. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the body of an email. The connected documents corroborate the affected product/version and the XSS root c...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

Fedora Update for mingw-libtiff FEDORA-2014-6837

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-libtiff FEDORA-2014-6831

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2963-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FCKedtior 2.6.10 Reflected Cross-Site Scripting (XSS)

Class Cross-Site Scripting Remote Yes Published 2nd June 2014 Credit Robin Bailey of Dionach [email protected] Vulnerable FCKeditor = 2.6.10 FCKeditor is prone to a reflected cross-site scripting XSS vulnerability due to inadequately sanitised user input. An attacker may leverage this issue to ru...

CVE-2012-3522

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3522

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3522

GeSHi contains an XSS vulnerability (CVE-2012-3522) in contrib/langwiz.php, affecting GeSHi prior to 1.0.8.11. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization in the langwiz example script. Multiple sources (N...

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

CVE-2012-3521

GeSHi’s cssgen contrib module is affected by directory traversal in versions prior to 1.0.8.11. The vulnerability arises when a user-supplied parameter (geshi-path or geshi-lang-path) contains a .. sequence, allowing an attacker to read arbitrary files. Affected product: GeSHi (cssgen contrib). R...

openSUSE Security Update : tiff (openSUSE-SU-2012:0955-1)

The following issues was fixed in tiff : - a overflow in tiff2pdf CVE-2012-3401 bnc770816 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-492. The text description of this plugin...

openSUSE Security Update : inn (openSUSE-SU-2012:1171-1)

fix starttls command injection issue CVE-2012-3523, bnc776967 - handle /var/run on tmpfs. bnc778439 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-600. The text description of...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0309-1)

java-160-openjdk was updated to the b24 release, fixing multiple security issues : dbg114-java-160-openjdk-5856 java-160-openjdk-5856 newupdateinfo Security fixes - S7082299, CVE-2011-3571: Fix inAtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502:...

openSUSE Security Update : quota (openSUSE-SU-2012:1058-1)

quota was fixed to handle tcp wrappers in rquotad correctly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-529. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : gimp (openSUSE-SU-2012:1623-1)

Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability when reading XWD files bnc791372, bgo687392, CVE-2012-5576. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-842...

openSUSE Security Update : curl (openSUSE-2012-76) (BEAST)

Fix IMAP, POP3 and SMTP URL sanitization bnc740452, CVE-2012-0036 - Disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option when built against an older OpenSSL version CVE-2010-4180. - Don't enable SSLOPDONTINSERTEMPTYFRAGMENTS bnc742306, CVE-2011-3389. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : horde3 / horde3-dimp / horde3-imp (openSUSE-2012-112)

Warning: Official end of life for horde 3 is April 2012! Changes in horde3 : - version 3.3.13 - Fixed a XSS vulnerability CVE-2012-0909. - Added support for resetting passwords in LDAP. - Fixed compatibility with Firefox 10. Changes in horde3-imp : - Fixed XSS vulnerabilities CVE-2012-0791. -...