CVE-2018-2969

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Core. The supported version that is affected is 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successfu...

CVE-2018-2969

CVE-2018-2969 affects Oracle Primavera Unifier (Core) in the Primavera Unifier component of Oracle Construction and Engineering Suite, specifically the 16.x series. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to read a subset of Primavera Unifier data, indicat...

CVE-2011-2969

...

CVE-2017-2969

Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting XSS vulnerability...

CVE-2017-2969

Adobe Campaign versions 16.4 Build 8724 and earlier are affected by a cross-site scripting (XSS) vulnerability (CVE-2017-2969). The issue is documented in CVE-2017-2969 and is addressed by Adobe’s APSB17-06 security update for Campaign, which resolves the XSS in the client console/inputs. Connect...

CVE-2017-2969

Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting XSS vulnerability...

APSB17-06 Security update available for Adobe Campaign

Adobe has released a security update for Adobe Campaign v6.11 for Windows and Linux. This update resolves a moderate security bypass affecting the Adobe Campaign client console. An authenticated user with access to the client console could upload and execute a malicious file, potentially resultin...

Ubuntu: Security Advisory (USN-2969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2969

CVE-2015-2969 corresponds to a persistent XSS in LEMON-S PHP Simple Oekaki BBS before version 1.21. The vulnerability is triggered in index.php through the oekakis parameter, allowing remote attackers to inject arbitrary scripts/HTML. Affected software: Simple Oekaki BBS ≤ v1.20 (prior to 1.21). ...

CVE-2015-2969

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)

A Remote File Inclusion vulnerability has been reported in WAnewsletter. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

CVE-2014-2969

The CVE-2014-2969 entry concerns NETGEAR NETGEAR GS108PE Prosafe Plus switches (firmware 1.2.0.5). A hard-coded credential pair, ntgruser:debugpassword, exists in the device and can be used via CGI endpoints (produce_burn.cgi, register_debug.cgi, bootcode_update.cgi) to gain access and upload fir...

Debian DSA-2969-1 : libemail-address-perl - security update

Bastian Blank reported a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation. Email::Address::parse used significant time on parsing empty quoted strings. A remote attacker able to supply specifically crafted input to an application using...

CVE-2013-2969

IBM Sterling Control Center (SCC) is affected by CVE-2013-2969 (XSS) in releases 5.2.0.9 and earlier, 5.3.x up to 5.3.0.3, and 5.4 up to 5.4.0.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters. Remediation is to upgrade ...

CVE-2012-2969

CVE-2012-2969 affects Caucho Quercus on Resin prior to 4.0.29. Root cause: Null byte injection in HTTP-request paths (via %00) allows bypassing filename-extension restrictions when creating files. Impact per sources includes potential information disclosure, DoS, or arbitrary code execution with ...

CVE-2012-2969

Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request...

Caucho's Quercus on Resin contains multiple vulnerabilities

Overview Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description It has been reported that Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to...

CVE-2010-2969

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/LikePages.py, 2 action/chart.py, and 3 action/userprofile.py, a similar issue to...

CVE-2010-2969

CVE-2010-2969 describes multiple cross-site scripting (XSS) vulnerabilities in MoinMoin up to version 1.7.3 and in the 1.9.x line before 1.9.3. The flaws allow remote attackers to inject arbitrary script/HTML via crafted content in specific modules, notably action/LikePages.py, action/chart.py, a...

CVE-2010-2969

Removed by vendor...