Oracle WebCenter Sites (AKA FatWire) XSS / SQL Injection / CSRF

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2,...

Debian Security Advisory DSA 2301-2 (rails)

The remote host is missing an update to rails announced via advisory DSA 2301-2. OpenVAS Vulnerability Test $Id: deb23012.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2301-2 rails Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2301-2] rails regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2392-1 [email protected] http://www.debian.org/security/ January 23, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package...

Debian: Security Advisory (DSA-2301-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rubygem-actionpack FEDORA-2011-11567

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2011-11567 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-actionpack FEDORA-2011-11567

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 2301-1] rails security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2301-1 [email protected] http://www.debian.org/security/ Luciano Bello September 5, 2011 http://www.debian.org/security/faq -...

DSA-2301-1 rails - several

Bulletin has no description...

CVE-2011-3186

CRLF injection vulnerability in actionpack/lib/actioncontroller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header...

CVE-2011-3186

CVE-2011-3186 is a CRLF injection vulnerability in Rails 2.3.x, exploitable via the Content-Type header in actionpack/lib/action_controller/response.rb, allowing an attacker to inject arbitrary HTTP headers and perform HTTP response splitting. The issue affects Rails 2.3.x up to 2.3.12; a fix was...

IBM WebSphere Application Server WS-Security Policy Unspecified vulnerability

The host is running IBM WebSphere Application Server and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodibmwastimestampunspecifiedvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM WebSphere Application Server WS-Security Policy Unspecified vulnerability Authors: Antu...

CVE-2010-3186

IBM WebSphere Application Server 7.x before 7.0.0.13 and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32 are affected when using a JAX-WS application; the WS-Security policy IncludeTimestamp setting is not handled correctly, with unspecified impact and remote a...

Unreal Tournament 2004 Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Unreal...

SLES9: Security update for gdk-pixbuf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gdk-pixbuf gdk-pixbuf-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SuSE9 Security Update : gdk-pixbuf (YOU Patch Number 10558)

This update fixes the following security problem: a heap overflow in the XPM reader allowed attackers to execute arbitrary code via specially crafted XPM images. CVE-2005-3186, CVE-2005-2975, CVE-2005-2976 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

CVE-2009-3186

CVE-2009-3186 concerns multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ. The issue allows remote attackers to inject arbitrary web script or HTML through specific parameters: (1) t in forum.php, (2) profile_name in profile.php, and (3) p in view.php. These details are consist...

CVE-2009-3186

Multiple cross-site scripting XSS vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to forum.php, 2 profilename parameter to profile.php, and 3 p parameter to view.php...

CVE-2009-3186

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33188 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33186 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33187...

CVE-2008-3186

Chipmunk Blog (Blogger) contains cross-site scripting (XSS) vulnerabilities in the membername parameter of five PHP scripts (members.php, comments.php, photos.php, archive.php, cat.php). Root cause: improper handling of user-supplied membername leads to script/HTML injection. Impact: allows remot...

CVE-2008-3186

creationtimestamp| type| source ---|---|--- 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31953 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31949 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31952 2008-06-23...