CVE-2012-2066

CVE-2012-2066 is a cross-site scripting (XSS) vulnerability affecting Drupal contributed editor modules: FCKeditor 6.x-2.x before 6.x-2.3, CKEditor 6.x-1.x before 6.x-1.9, and CKEditor 7.x-1.x before 7.x-1.7. The issue allows remote authenticated users or remote attackers to inject arbitrary scri...

SA-CONTRIB-2012-040 - CKEditor and FCKeditor - multiple XSS, arbitrary code execution

CKEditor and its predecessor FCKeditor allow Drupal to replace textarea fields with the FCKEditor - a visual HTML WYSIWYG editor. The modules have an AJAX callback that filters text to prevent Cross site scripting attacks on content edits. This AJAX callback function contains a number of bugs whi...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2010-13903

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-13903 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Debian: Security Advisory (DSA-2066-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2066-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer. It was discovered that NULL pointer dereferences, buffer overflows and infinite loops in the SMB, SMB PIPE, ASN1.1 and SigComp dissectors could lead to denial of service or the execution of arbitrary...

CVE-2009-2066

CVE-2009-2066 affects Apple Safari. The issue arises when https pages load http content that is referenced from an https site, allowing MITM attackers to modify an http page to include an https iframe that loads http scripts, enabling arbitrary web script execution in an https context. Root cause...

CVE-2008-2066

CVE-2008-2066 is a cross‑site scripting (XSS) vulnerability in miniBB’s admin path: bb_admin.php, exploitable via the whatus parameter in the searchusers2 action. Affected: miniBB 2.2a and other versions prior to 3.0.1. Attack vector is remote, enabling injection of arbitrary script/HTML; impact ...

CVE-2007-0691

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2066. Reason: This candidate is a duplicate of CVE-2007-2066. Notes: All CVE users should reference CVE-2007-2066 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-0691

The CVE covers UseBB before 1.0.6, where remote attackers can obtain server-path information through an error message triggered by unspecified GET/POST parameters to an unspecified script. The root cause is a path disclosure vulnerability in UseBB’s error handling. Affected product: UseBB (PHP/My...

CVE-2002-2066

BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 do not clear Windows alternate data streams (ADS) on NTFS-attached files, allowing recovery of securely deleted data. Connected sources confirm this vulnerability affects BCWipe on NTFS by failing to purge ADS, with implications of sensitive ...

CVE-2005-2066

CVE-2005-2066 : A SQL injection vulnerability exists in the ASP Nuke 0.80 web application via the TaskID parameter in the file comment_post.asp. Remote attackers could execute arbitrary SQL statements, as reported by the NVD entry, with an impact described as partial confidentiality, integrity, a...

CVE-2004-2066

CVE-2004-2066 affects LinPHA 0.9.4, where a flaw in session.php enables SQL injection via the linpha_userid or linpha_password cookies, allowing remote attackers to execute arbitrary SQL and bypass authentication. The vulnerability’s impact is described as partial confidentiality, integrity, and ...