CVE-2012-6585

CVE-2012-6585 : Cross-site scripting (XSS) in MYRE Realty Manager’s search.php allows remote attackers to inject arbitrary script via the cat_id1 parameter. Affected: MYRE Realty Manager, component: search.php, parameter: cat_id1. Exploitability: remote, no authentication; impact: partial integri...

CVE-2012-6584

CVE-2012-6584 concerns multiple SQL injection vulnerabilities in the MYRE Realty Manager application. The flaw allows remote attackers to execute arbitrary SQL commands through the bathrooms1 parameter in either demo2/search.php or search.php. The vulnerability is due to improper input handling i...

CVE-2012-6589

Cross-site scripting XSS vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

CVE-2012-6586

CVE-2012-6586 describes multiple SQL injection vulnerabilities in MYRE Vacation Rental Software that allow remote attackers to execute arbitrary SQL commands via parameters in vacation/1_mobile/search.php (garage1, bathrooms1) or through input to vacation/widgate/request_more_information.php. The...

CVE-2012-6588

The vulnerability CVE-2012-6588 affects the MYRE Business Directory product, specifically the links.php component. The issue is a SQL injection in the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not specify affected versions, build detail...

Microsoft Windows TCP/IP ICMPv6 远程拒绝服务漏洞(CVE-2013-3183)(MS13-065)

BUGTRAQ ID: 61666 CVECAN ID: CVE-2013-3183 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows TCP/IP栈内存在拒绝服务漏洞，可使目标系统停止响应。此漏洞源于TCP/IP栈没有正确分配进栈ICMPv6报文的内存。 0 Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 8 Microsoft...

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

CVE-2012-4733

CVE-2012-4733 affects Request Tracker (RT) 4.x prior to 4.0.13. The issue is an improper enforcement of the DeleteTicket and “custom lifecycle transition” permissions, allowing remote authenticated users who have the ModifyTicket permission to delete tickets via unspecified vectors. The connected...

CVE-2012-6583

Cross-site scripting XSS vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name...

CVE-2012-6583

The CVE-2012-6583 entry concerns the Drupal Imagemenu module (6.x-1.x) prior to 6.x-1.4. Affected component is the image file name rendering, which does not escape properly, enabling XSS when a user with the administer imagemenu permission accesses menus built from images. The vulnerability’s imp...

CVE-2012-6583

Cross-site scripting XSS vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name...

Fedora Update for glibc FEDORA-2013-15053

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.2 / 11.3 Security Update : tomcat6 (SAT Patch Numbers 8155 / 8156)

This update of tomcat6 fixes : - apache-tomcat-CVE-2012-3544.patch. bnc831119 - use chown --no-dereference to prevent symlink attacks on log bnc822177c7/prevents CVE-2013-1976 - Fix tomcat init scripts generating malformed classpath http://youtrack.jetbrains.com/issue/JT-18545 bnc804992 patch fro...

Apache HTTP Server Scoreboard Security Bypass Vulnerability - Windows

Apache HTTP Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:httpserver...

CVE-2012-6582

The vulnerability CVE-2012-6582 affects the Drupal Spambot module: versions 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 permit XSS via stopforumspam.com API responses that are logged by watchdog. The root cause is improper sanitization of API responses before logging, enabling remote attack...

Fedora Update for smokeping FEDORA-2013-14278

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows HTTP.sys Denial of Service (MS13-039) - Improved Performance (CVE-2013-1305)

A denial of service vulnerability has been reported in Windows Server 2012 and Windows 8. The vulnerability is due to an error in the way HTTP.sys handles a malicious HTTP header. Successful exploitation would result in a denial of service condition...

NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)

A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...

CVE-2012-5575

CVE-2012-5575 affects Apache CXF: versions 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 do not verify that the chosen cryptographic algorithm is allowed by WS-SecurityPolicy AlgorithmSuite before decrypting, enabling an attacker to coerce the use of weaker algorithms an...