ESA-2014-057: EMC Documentum Foundation Services (DFS) XML External Entity (XXE) Vulnerability

ESA-2014-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-057: EMC Documentum Foundation Services DFS XML External Entity XXE Vulnerability EMC Identifier: ESA-2014-057 CVE Identifier: CVE-2014-2510 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products:...

CVE-2014-2510

CVE-2014-2510 concerns an XXE vulnerability in the JAXB XML parser used by EMC Documentum Foundation Services (DFS). Affected products and versions (as cited in ESA-2014-057 and NVD/NVD mirror entries) include EMC DFS 6.6 prior to P39, 6.7 SP1 prior to P28, and 6.7 SP2 prior to P15, as well as My...

Debian DSA-2510-1 : extplorer - Cross-site request forgery

John Leitch has discovered a vulnerability in eXtplorer, a very feature rich web server file manager, which can be exploited by malicious people to conduct cross-site request forgery attacks. The vulnerability allows users to perform certain actions via HTTP requests without performing any validi...

Debian Security Advisory DSA 2320-1 (dokuwiki)

The remote host is missing an update to dokuwiki announced via advisory DSA 2320-1. OpenVAS Vulnerability Test $Id: deb23201.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2320-1 dokuwiki Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2320-1 : dokuwiki - regression fix

The DokuWiki update included in Debian Lenny 5.0.9 to address a cross site scripting issue CVE-2011-2510 had a regression rendering links to external websites broken. This update corrects that regression. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

CVE-2011-2510

Cross-site scripting XSS vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link...

CVE-2011-2510

DokuWiki is affected by CVE-2011-2510: an XSS vulnerability in the RSS embedding feature that allows remote script injection via a link in versions prior to 2011-05-25a Rincewind. The connected advisories indicate a fix was released (20110525a) and recommend upgrading to the patched Dokuwiki rele...

Fedora Update for dokuwiki FEDORA-2011-8816

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : dokuwiki-0-0.8.20110525.a.fc14 (2011-8816)

Fix: XSS in DokuWiki's RSS embedding mechanism Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2010-2510

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2010-2510

The CVE-2010-2510 entry describes a SQL injection in the 2daybiz Web Template Software, specifically in customize.php where the tid parameter is exploited to execute arbitrary SQL commands. The vulnerability enables remote attackers to interact with the underlying database, as indicated by the de...

CVE-2010-2510

creationtimestamp| type| source ---|---|--- 2010-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14020...

CVE-2009-2510

Technical details for CVE-2009-2510 are not publicly provided in the connected documents. Please monitor for updates.

Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)

This host is missing a critical security update according to Microsoft Bulletin MS09-056. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS09-056: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)

The remote Windows host contains a version of the Microsoft Windows CryptoAPI that is affected by multiple vulnerabilities : - A spoofing vulnerability exists in the Microsoft Windows CryptoAPI component when parsing ASN.1 information from X.509 certificates. An attacker who successfully exploite...

CVE-2009-3454

CVE-2009-2510 describes a spoofing vulnerability in the Windows CryptoAPI where the Common Name (CN) field in X.509 certificates containing a NULL terminator is misparsed, allowing MITM-style impersonation if a malicious cert is issued by a trusted CA. The issue affects multiple Windows versions ...

SSL NULL Termination Certificate Validation Security Bypass (CVE-2009-2408; CVE-2009-2510; CVE-2009-4565)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Firefox is a popular, open source web browser developed by Mozilla Foundation. A security bypass vulnerability has been reported in Mozilla Networ...

Mandriva Update for php MDKSA-2007:102 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:102 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for php FEDORA-2007-526

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200705-19 (php)

The remote host is missing updates announced in advisory GLSA 200705-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...