CVE-2014-2080

Cross-site scripting XSS vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter...

CVE-2014-2080

CVE-2014-2080 is a Cross-site scripting (XSS) vulnerability in MODX Revolution’s manager/templates/default/header.tpl. It affects MODX Revolution versions before 2.2.11, allowing remote attackers to inject arbitrary web script or HTML via the "a" parameter to the manager interface. The issue aris...

Ubuntu: Security Advisory (USN-2080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for moodle FEDORA-2013-8702

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-8702 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2013-8692

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for moodle FEDORA-2013-8702

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2080

The CVE-2013-2080 entry concerns Moodle’s core_grade component where hidden grades are not properly accounted for. The vulnerability affects Moodle versions: 2.2.10 and 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.4. A remote authenticated user (via the student role) can read the Gradebook Overvi...

CVE-2013-7291

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-017...

CVE-2012-2080

Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...

CVE-2012-2080

The CVE concerns the Drupal contributed module Node Limit Number (6.x-1.x) prior to version 6.x-1.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can allow an attacker to hijack the authentication of users with the administer node limitnumber permission, triggering delete-limit a...

CVE-2012-2080

Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...

SA-CONTRIB-2012-052 - Node Limit Number - Cross Site Request Forgery (CSRF)

CVE: CVE-2012-2080 The Node Limit Number module enables an administrator to place limits on how many nodes may be created by each user. Node Limit Number does not protect the delete URL against Cross Site Request Forgery attacks, allowing a malicious user to trick someone with "administer node...

CVE-2011-2080

CVE-2011-2080 affects MediaCAST 8 and earlier. The vulnerability is a SQL injection in two entry points: (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ and (2) unspecified input to authenticate_ad_setup_finished.cfm. This allows remote attackers to execute arbitr...

CVE-2010-2080

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3476

Removed by vendor...

CVE-2010-2080

OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 are affected by CVE-2010-2080, a cross-site scripting (XSS) vulnerability in the web interface allowing remote authenticated users to inject script/HTML via unspecified vectors. The issue is documented across multiple sources (NVD and OSV/OpenVAS ent...

Debian Security Advisory DSA 2080-1 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory DSA 2080-1. OpenVAS Vulnerability Test $Id: deb20801.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2080-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2080-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2080-1 : ghostscript - several vulnerabilities

Several security issues have been discovered in Ghostscript, a GPL PostScript/PDF interpreter, which might lead to the execution of arbitrary code if a user processes a malformed PDF or Postscript file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2009-2080

CVE-2009-2080 concerns admin.php in MRCGIGUY The Ticket System 2.0. The vulnerability is a failure to properly restrict access, enabling remote attackers to (1) obtain sensitive configuration information via the editconfig action and (2) change the administrator’s password via the id parameter in...