85 matches found
Security Bulletin: ClearQuest Cross-Site Scripting (XSS) Vulnerability (CVE-2012-2205)
Summary IBM Rational ClearQuest Web client contains a Cross-Site Scripting vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...
CVE-2016-2205
Symantec Workspace Streaming (SWS) and Workspace Virtualization (SWV) are affected by CVE-2016-2205, a path traversal in the file-download configuration file of the management consoles. An authenticated user could read arbitrary application files on the host via this vulnerability. Affected versi...
Symantec Workspace Streaming and Workspace Virtualization Path Traversal and Arbitrary File Read
SUMMARY Symantec Workspace Streaming SWS and Workspace Virtualization SWV management consoles were susceptible to a path traversal in a file download configuration file that could allow a malicious user who could access the vulnerable file to view unauthorized application files of specific file...
Ubuntu Update for tiff USN-2205-1
Check for the Version of tiff OpenVAS Vulnerability Test $Id: gbubuntuUSN22051.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for tiff USN-2205-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2205-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2205-1 advisory. Pedro Ribeiro discovered that LibTIFF incorrectly handled certain malformed images when using the gif2tiff tool. If a user or automated system were trick...
CVE-2014-2205
CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...
KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator
An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Related products McAfee-ePolicy-Orchestrator CVE...
Fedora Update for wordpress FEDORA-2013-11590
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2205
The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...
CVE-2013-2205
CVE-2013-2205 affects WordPress prior to 3.5.2, where the SWFUpload security.allowDomain setting is too permissive, potentially allowing an attacker to bypass Same Origin Policy and perform XSS via a crafted site. Public sources in the connected documents corroborate this with a WordPress 3.5.2 s...
Fedora Update for wordpress FEDORA-2013-11630
Check for the Version of wordpress OpenVAS Vulnerability Test Fedora Update for wordpress FEDORA-2013-11630 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora Update for wordpress FEDORA-2013-11630
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2205
Summary: CVE-2012-2205 is a Cross-Site Scripting (XSS) vulnerability in the IBM Rational ClearQuest Web client. The issue affects ClearQuest Web clients prior to version 7.1.2.7 and 8.0.0.3. Impact / root cause: remote authenticated users can inject arbitrary web script or HTML via a workspace qu...
CVE-2011-2205
Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...
CVE-2011-2205
CVE-2011-2205 affects Prosody prior to version 0.8.1, where recursion during entity expansion is not properly detected. A crafted XML with a large number of nested entity references can cause a remote denial-of-service (memory and CPU consumption), a vulnerability related to CVE-2003-1564. The en...
CVE-2011-2205
Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...
Debian Security Advisory DSA 2205-1 (gdm3)
The remote host is missing an update to gdm3 announced via advisory DSA 2205-1. OpenVAS Vulnerability Test $Id: deb22051.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2205-1 gdm3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2205-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2205-1 : gdm3 - privilege escalation
Sebastian Krahmer discovered that GDM 3, the GNOME Display Manager, does not properly drop privileges when manipulating files related to the logged-in user. As a result, local users can gain root privileges. The oldstable distribution lenny does not contain a gdm3 package. The gdm package is not...