SuSE 10 Security Update : gdk-pixbuf (ZYPP Patch Number 8158)

This update of gdk-pixbuf fixes multiple buffer overflows that could have caused a crash or potentially have allowed heap corruptions. CVE-2011-2485 / CVE-2012-2370 / CVE-2011-2897 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2010-3111

Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors, a different vulnerability than CVE-2010-2897...

CVE-2010-2897

CVE-2010-2897 affects Google Chrome prior to 5.0.375.125. The connected records consistently state vulnerability to an unspecified flaw in the Windows kernel with unknown impact and attack vectors, without detailing root cause beyond “unspecified flaw.” The NVD entry lists a base score of 10.0 (H...

CVE-2009-2897

Hyperic HQ pre-3.2.6.1, 4.0.x pre-4.0.3.1, 4.1.x pre-4.1.2.1 and 4.2-beta1 are affected by XSS in the web UI due to improper handling of numeric parameters in multiple .do endpoints, notably mastheadAttach.do (typeId), Resource.do (eid), and UserAdmin.do (u). The flaw originates from an uncaught ...

Hyperic HQ跨站脚本和脚本注入漏洞

CVECAN ID: CVE-2009-2897,CVE-2009-2898 Hyperic HQ是一个开源的IT资源管理平台。 Hyperic HQ没有正确地验证提交给mastheadAttach.do的typeId参数、Resource.do的eid参数以及admin/user /UserAdmin.do的u参数便返回给了用户，这可能导致反射式跨站脚本攻击；此外由于没有正确地过滤传送给Description参数的输入便在警告列表中返回给了用户，这可能导致存储式跨站脚本攻击。 SpringSource Hyperic HQ 4.2-beta1 SpringSource Hyperic ...

CVE-2009-2897: Hyperic HQ - Reflected XSS in stack trace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2009-2897: Reflected XSS in stack trace Severity: Moderate Vendor: SpringSource Versions Affected: Hyperic HQ 3.2, 4.0, 4.1, 4.2-beta1. Earlier, unsupported versions may also be affected Description: The stack trace displayed on the default erro...

Core Security Technologies Advisory 2009.0812

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...

Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS

Exploit for jsp platform in category web applications ======================================= Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS ======================================= Hyperic HQ 1 is an open source monitoring software designed to manage web applications and infrastructure. It auto-discover...

Hyperic HQ Multiple XSS

Advisory ID Internal CORE-2009-0812 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Date published: 2009-10-02 Date of last update: 2009-11-23 Vendors contacted: SpringSource Release mode: Coordinated release 2. Vulnerability Information Class: Cross site...

CVE-2008-2897

CVE-2008-2897 describes a SQL injection in PageSquid CMS 0.3 Beta, where the vulnerability is in index.php via the mass-assignable? page parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 ( HIGH ), with access over network and n...

CVE-2007-2897

CVE-2007-2897: Microsoft IIS 6.0 (server side) is vulnerable to a denial of service and potential information leakage via requests for a URI containing a DOS device name (example: /AUX/.aspx), effectively bypassing a blacklist for DOS device requests. The issue is triggered when a crafted request...

CVE-2006-2897

CVE-2006-2897 concerns FunkBoard 0.71 and is described as a cross‑site scripting (XSS) vulnerability. The affected component is FunkBoard 0.71; the underlying flaw is not detailed beyond the XSS vector being unspecified, with the NVD entry indicating the vulnerability can lead to HTML or script i...

CVE-2005-2897

In CVE-2005-2897, WEB//NEWS 1.4 is vulnerable to information disclosure: remote attackers can obtain sensitive information by directly requesting files in the actions directory, with the error message revealing the file path (illustrated by cat.add.php). NVD lists a base score of 5.0 (Medium) wit...