Lucene search
+L

64 matches found

OpenVAS
OpenVAS
added 2015/03/14 12:00 a.m.30 views

Fedora Update for cups-filters FEDORA-2015-3036

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.4AI score0.02958EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2014/10/01 12:00 a.m.29 views

Debian Security Advisory DSA 3036-1 (mediawiki - security update)

It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting. OpenVAS Vulnerability Test $Id: deb3036.nasl 8972 2018-02-28 07:02:10Z cfischer $ Auto-generated from advisory DSA 3036-1 using nvtgen 1.0 Script version: 1.0...

4.3CVSS0.01983EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2014/09/29 12:00 a.m.21 views

Debian DSA-3036-1 : mediawiki - security update

It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

4.3CVSS7.2AI score0.01983EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.44 views

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0374-1)

Changes in chromium : - Update to 19.0.1066 - Fixed Chrome install/update resets Google search preferences Issue: 105390 - Don't trigger accelerated compositing on 3D CSS when using swiftshader Issue: 116401 - Fixed a GPU crash Issue: 116096 - More fixes for Back button frequently hangs Issue:...

10CVSS8.6AI score0.04816EPSS
SaveExploits2References20
CVE
CVE
added 2014/06/08 11:00 p.m.52 views

CVE-2014-3036

The CVE-2014-3036 entry concerns IBM API Management 3.0.0.0. It describes an unspecified vulnerability where, when basic authentication is used for APIs, remote attackers could bypass topology-access restrictions and obtain sensitive information via unknown vectors. The available sources (NVD and...

4.3CVSS6.9AI score0.01289EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2013/09/12 1:00 a.m.54 views

CVE-2013-3036

IBM Rational Requirements Composer prior to 4.0.4 is affected by an open redirect vulnerability. Remote authenticated users can construct a URL that redirects victims to arbitrary external sites, enabling phishing via crafted links. Documents consistently describe the issue as an open redirect wi...

4.9CVSS6.2AI score0.00852EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.35 views

Gentoo Security Advisory GLSA 201203-19 (chromium)

The remote host is missing updates announced in advisory GLSA 201203-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

10CVSS6.8AI score0.04816EPSS
SaveExploits5References9
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.37 views

Gentoo Security Advisory GLSA 201203-19 (chromium)

The remote host is missing updates announced in advisory GLSA 201203-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS1.1AI score0.04816EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2012/03/08 12:00 a.m.55 views

Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmar12macosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Denial of Service Vulnerabilities - March12 Mac OS X Authors:...

7.5CVSS0.6AI score0.02188EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2012/03/08 12:00 a.m.53 views

Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Windows)

The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmar12win.nasl 6022 2017-04-25 12:51:04Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - March12 Windows Authors: Rachan...

7.5CVSS0.02188EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2012/03/06 12:00 a.m.36 views

FreeBSD : chromium -- multiple vulnerabilities (99aef698-66ed-11e1-8288-00262d5ed8ee)

Google Chrome Releases reports : 105867 High CVE-2011-3031: Use-after-free in v8 element wrapper. Credit to Chamal de Silva. 108037 High CVE-2011-3032: Use-after-free in SVG value handling. Credit to Arthur Gerkis. 108406 115471 High CVE-2011-3033: Buffer overflow in the Skia drawing library...

7.5CVSS8.3AI score0.02188EPSS
SaveExploits2References16
CVE
CVE
added 2012/03/05 7:00 p.m.81 views

CVE-2011-3036

CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...

6.8CVSS6.7AI score0.01707EPSS
SaveExploits1References18Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/03/05 12:00 a.m.40 views

Google Chrome < 17.0.963.65 Multiple Vulnerabilities

Binary data 800899.prm...

7.5CVSS9.7AI score0.02188EPSS
SaveExploits2References15
CVE
CVE
added 2010/10/29 6:00 p.m.55 views

CVE-2010-3036

CiscoWorks Common Services web server module contains multiple buffer overflows in the Cisco-developed authentication code, enabling remote, unauthenticated code execution with system administrator privileges via sessions on TCP ports 443 or 1741. Affected: CiscoWorks Common Services prior to ver...

10CVSS8.1AI score0.05992EPSS
SaveExploits0References6Affected Software7
CVE
CVE
added 2010/02/23 8:00 p.m.77 views

CVE-2009-3036

Summary of CVE-2009-3036: Symantec IM Manager Console is affected by a cross-site scripting (XSS) vulnerability in the management console. The issue allows an attacker to inject arbitrary HTML/script into a user’s browser when authenticated to the console, due to improper input handling. Affected...

4.3CVSS5.7AI score0.02252EPSS
SaveExploits0References5Affected Software1
Symantec
Symantec
added 2010/02/18 8:00 a.m.121 views

Symantec IM Manager Local-Access Cross-site Scripting

SUMMARY Symantecs IM Manager management console is susceptible to a cross-site scripting issue. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec IM Manager | 8.3 and 8.4 | Upgrade to 8.4.13 Note: Customers running 8.3 versions of Symantec IM Manager should upgrade to the lates...

4.3CVSS6AI score0.02252EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.18 views

Fedora Update for pdns-recursor FEDORA-2008-3036

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.7AI score0.03964EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.27 views

Fedora Update for pdns-recursor FEDORA-2008-3036

Check for the Version of pdns-recursor OpenVAS Vulnerability Test Fedora Update for pdns-recursor FEDORA-2008-3036 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.8CVSS6.4AI score0.03964EPSS
SaveExploits1References2
CVE
CVE
added 2008/07/07 6:20 p.m.38 views

CVE-2008-3036

CVE-2008-3036 affects CMS little 0.0.1 via a directory traversal in index.php. The template parameter’s .. path allows remote attackers to include and execute arbitrary local files, and possibly remote files. Documented impact is remote code execution through file inclusion. Root cause: insuffici...

7.5CVSS7.1AI score0.02486EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2007/09/12 1:00 a.m.63 views

CVE-2007-3036

CVE-2007-3036 describes a local privilege-escalation vulnerability in Windows Services for UNIX (WSF) 3.0 and 3.5 and in the Subsystem for UNIX-based Applications on Windows 2000/XP/Server 2003/Vista. The underlying issue is improper handling of setuid binary files which may allow a local, authen...

6.9CVSS6.3AI score0.02398EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder