215 matches found
CVE-2013-2203
WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message...
Server side request forgery (ssrf)
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery SSRF issue, a similar vulnerability to CVE-2013-0235...
CVE-2013-2202
WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2013-2199
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery SSRF issue, a similar vulnerability to CVE-2013-0235...
CVE-2013-2204
moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a pound sign character during extraction of the QUERYSTRING, which allows remote attackers to pass arbitrary parameters to a Flash...
Apple Remote Desktop Information Disclosure Vulnerability
This host is installed with Apple Remote Desktop and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbappleremotedesktopinfodiscvuln.nasl 6601 2017-07-07 10:00:10Z cfischer $ Apple Remote Desktop Information Disclosure Vulnerability Authors: Madhuri D Copyright:...
Fedora Update for kernel FEDORA-2012-12490
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-12490 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Debian: Security Advisory (DSA-2487-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 17 : kernel-3.5.2-3.fc17 (2012-12490)
Fixes CVE-2012-3520, and should also fix a number of the boot failures seen since 3.5.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...
KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting
KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version:...
KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting
Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search...
Samba < 3.4.8, 3.5.x < 3.5.2 Multiple Remote DoS Vulnerabilities
Samba is prone to multiple remote denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Firefox 3.5.2 3.0.14 browser engine crashes
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
Design/Logic Flaw
Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cau...
CVE-2009-2975
Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cau...
CVE-2009-2975
Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cau...
Mozilla Foundation Security Advisory 2009-46
Mozilla Foundation Security Advisory 2009-46 Title: Chrome privilege escalation due to incorrectly cached wrapper Impact: Critical Announced: August 3, 2009 Reporter: Wladimir Palant, mozbugra4 Products: Firefox 3.5 Fixed in: Firefox 3.5.2 Description Mozilla add-on developer and community member...
Mozilla Foundation Security Advisory 2009-44
Mozilla Foundation Security Advisory 2009-44 Title: Location bar and SSL indicator spoofing via window.open on invalid URL Impact: Moderate Announced: August 3, 2009 Reporter: Juan Pablo Lopez Yacubian Products: Firefox Fixed in: Firefox 3.5.2 Firefox 3.0.13 Description Security researcher Juan...
Fedora 11 : kazehakase-0.5.6-11.svn3771_trunk.fc11.4 / Miro-2.0.5-3.fc11 / blam-1.8.5-13.fc11 / etc (2009-8279)
Update to new upstream Firefox version 3.5.2, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...