SpamTitan contains a reflected cross-site scripting (XSS) vulnerability

Overview SpamTitan contains a reflected cross-site scripting XSS vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'SpamTitan contains a reflected cross-site scripting vulnerability in the auth-settings-x.php page of the management...

Debian DSA-2965-1 : tiff - security update

Murray McAllister discovered a heap-based buffer overflow in the gif2tiff command line tool. Executing gif2tiff on a malicious tiff image could result in arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian: Security Advisory (DSA-2965-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2965

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue...

CVE-2012-2965

CVE-2012-2965 affects Caucho Quercus on Resin prior to version 4.0.29. The vulnerability arises from improper handling of unspecified characters in variable names, related to an HTTP Parameter Contamination issue, with unknown impact and remote attack vectors. Remediation per multiple sources is ...

Caucho's Quercus on Resin contains multiple vulnerabilities

Overview Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description It has been reported that Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to...

Nmap NSE net: wdb-version

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965

CVE-2010-2965 affects Wind River VxWorks targets (6.x, 5.x and earlier), notably Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1. The WDB target agent debug service exposes a UDP 17185 port that can be used by remote attackers to read or modify arbitrary memory, perform funct...

CVE-2009-2965

Cross-site scripting XSS vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before SD 7.0.100, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-2965

CVE-2009-2965 concerns a cross-site scripting (XSS) vulnerability in the entry/index.jsp page of Radvision Scopia 5.7, with potential presence in versions prior to SD 7.0.100. Exploitation described as arbitrary web-script or HTML injection via the page parameter, potentially allowing an attacker...

CVE-2009-2965

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34904...

CVE-2008-2965

Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

CVE-2008-2965

CVE-2008-2965 is an XSS vulnerability in JaxUltraBB (JUBB) 2.0 and earlier, specifically in viewforum.php via the forum parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected component: viewforum.php in JUBB; underlying cause is improper handling/encoding of the fo...

CVE-2008-2965

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5877...

CVE-2007-2965

CVE-2007-2965 concerns the Real-time Scanning component across multiple F-Secure products (Internet Security 2005–2007, Anti-Virus 2005–2007, and related Protection Service for Consumers 6.40 and earlier). The root cause is improper validation in IOCTL/I/O space handling, allowing a crafted I/O r...

CVE-2006-2965

Particle Soft Particle Whois 1.0.3 is affected by multiple XSS flaws where unsanitized input can be injected via (1) the target parameter in index.php and (2) the input box. The root cause is improper handling of user-supplied data leading to script/HTML execution in the victim’s browser. Publicl...

CVE-2005-2965

...

[SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 857-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...