99 matches found
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2015-2670
CVE-2015-2670 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Ubuntu 14.04 LTS : libwmf vulnerabilities (USN-2670-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2670-1 advisory. Fernando Muoz and Stefan Cornelius discovered that libwmf incorrectly handled certain malformed images. If a user or automated system were tricked into...
ZOHO ManageEngine OpStor多个跨站脚本漏洞
CVE ID:CVE-2014-2670 Zoho ManageEngine OpStor是一个存储设备监控解决方案,帮助企业有效监控存储资源。 允许通过验证的攻击者注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 ZOHO ManageEngine OpStor ManageEngine Build 8500版本已修复该漏洞，建议用户下载使用： http://www.manageengine.com/products/opstor/...
CVE-2014-2670
Cross-site scripting XSS vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter, a different vulnerability than CVE-2014-0344...
CVE-2014-2670
CVE-2014-2670 affects Zoho ManageEngine OpStor (storage device monitoring). The vulnerability is an XSS in Properties.do via the name parameter, exploitable by remote authenticated users. It is tied to builds before 8500; Build 8500 fixes the issue. The partage of exploitation details across conn...
CVE-2014-2670
Cross-site scripting XSS vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter, a different vulnerability than CVE-2014-0344...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
CVE-2013-2671
Summary: CVE-2013-2670, CVE-2013-2671, and CVE-2013-2507 describe cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer family. The NVD entries indicate affected firmware/builds include G (1.03) and L (1.10) across multiple CVEs. Vulnerable components include web UI endpoi...
CVE-2013-2670
The CVE-2013-2670 entry describes an XSS vulnerability in Brother MFC-9970CDW printers with firmware G (1.03) and L (1.10). The flaw allows remote attackers to inject arbitrary web script or HTML by supplying an arbitrary parameter name via QUERY_STRING to admin/admin_main.html. This is distinct ...
CVE-2012-2670
manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a...
CVE-2012-2670
CVE-2012-2670 affects Collabtive prior to 0.7.6. Affected component: manageuser.php/ avatar upload handling. Root cause: improper access controls allow remote authenticated users, and possibly unauthenticated attackers, to bypass restrictions and upload/execute arbitrary files by uploading an ava...
CVE-2012-2670
manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a...
CentOS Update for java CESA-2009:1201 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 2670)
This update of pcsc-lite fixes a local vulnerability stack overflow which allowed every user with write-access to '/var/run/pcscd/pcscd.comm' to gain root privileges. CVE-2010-0407 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CVE-2010-2670
CVE-2010-2670 concerns an SQL injection in recipedetail.php of the BrotherScripts Recipe Website, exploitable via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands on the backend database. The public sources (NVD entry and related references) describe ...
