83 matches found
CVE-2017-2969
Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting XSS vulnerability...
CVE-2017-2969
Adobe Campaign versions 16.4 Build 8724 and earlier are affected by a cross-site scripting (XSS) vulnerability (CVE-2017-2969). The issue is documented in CVE-2017-2969 and is addressed by Adobe’s APSB17-06 security update for Campaign, which resolves the XSS in the client console/inputs. Connect...
CVE-2017-2969
Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting XSS vulnerability...
APSB17-06 Security update available for Adobe Campaign
Adobe has released a security update for Adobe Campaign v6.11 for Windows and Linux. This update resolves a moderate security bypass affecting the Adobe Campaign client console. An authenticated user with access to the client console could upload and execute a malicious file, potentially resultin...
Ubuntu: Security Advisory (USN-2969-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2969
CVE-2015-2969 corresponds to a persistent XSS in LEMON-S PHP Simple Oekaki BBS before version 1.21. The vulnerability is triggered in index.php through the oekakis parameter, allowing remote attackers to inject arbitrary scripts/HTML. Affected software: Simple Oekaki BBS ≤ v1.20 (prior to 1.21). ...
CVE-2015-2969
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...
Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)
A Remote File Inclusion vulnerability has been reported in WAnewsletter. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...
CVE-2014-2969
The CVE-2014-2969 entry concerns NETGEAR NETGEAR GS108PE Prosafe Plus switches (firmware 1.2.0.5). A hard-coded credential pair, ntgruser:debugpassword, exists in the device and can be used via CGI endpoints (produce_burn.cgi, register_debug.cgi, bootcode_update.cgi) to gain access and upload fir...
Debian DSA-2969-1 : libemail-address-perl - security update
Bastian Blank reported a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation. Email::Address::parse used significant time on parsing empty quoted strings. A remote attacker able to supply specifically crafted input to an application using...
CVE-2013-2969
IBM Sterling Control Center (SCC) is affected by CVE-2013-2969 (XSS) in releases 5.2.0.9 and earlier, 5.3.x up to 5.3.0.3, and 5.4 up to 5.4.0.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters. Remediation is to upgrade ...
CVE-2012-2969
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request...
CVE-2012-2969
CVE-2012-2969 affects Caucho Quercus on Resin prior to 4.0.29. Root cause: Null byte injection in HTTP-request paths (via %00) allows bypassing filename-extension restrictions when creating files. Impact per sources includes potential information disclosure, DoS, or arbitrary code execution with ...
Caucho's Quercus on Resin contains multiple vulnerabilities
Overview Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description It has been reported that Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to...
CVE-2010-2969
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/LikePages.py, 2 action/chart.py, and 3 action/userprofile.py, a similar issue to...
CVE-2010-2969
CVE-2010-2969 describes multiple cross-site scripting (XSS) vulnerabilities in MoinMoin up to version 1.7.3 and in the 1.9.x line before 1.9.3. The flaws allow remote attackers to inject arbitrary script/HTML via crafted content in specific modules, notably action/LikePages.py, action/chart.py, a...
CVE-2010-2969
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/LikePages.py, 2 action/chart.py, and 3 action/userprofile.py, a similar issue to...
CVE-2010-2969
Removed by vendor...
MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability
MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...