KLA10885 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handlin...

WordPress < 3.4.1 Multiple Vulnerabilities

Binary data 9114.prm...

Debian DSA-3384-1 : virtualbox - security update

Two vulnerabilities have been discovered in VirtualBox, an x86 virtualisation solution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3384. The text itself is copyright C Software in the...

CVE-2015-3384

Cross-site scripting XSS vulnerability in the Bank Account Listing Page in the Commerce Balanced Payments module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3384

CVE-2015-3384 is a Cross-Site Scripting (XSS) vulnerability in the Drupal Commerce Balanced Payments module, specifically affecting the Bank Account Listing Page. The root cause is insufficient sanitization of user-supplied text in that page, enabling remote authenticated users to inject arbitrar...

CVE-2015-3384

Cross-site scripting XSS vulnerability in the Bank Account Listing Page in the Commerce Balanced Payments module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3384

CVE-2014-3384 affects Cisco ASA Software: IKEv2 implementation can be exploited by remote attackers to cause a denial of service (device reload) during tunnel creation. The vulnerability stems from the IKEv2 code handling crafted packets, with validated impact across listed versions: 8.4 before 8...

Multiple Vulnerabilities in Cisco Content Security Management Appliance (cisco-sa-20130626-sma)

According to its self-reported version, the version of Cisco Content Security Management Appliance running on the remote host has the following vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary...

Multiple Vulnerabilities in Cisco Web Security Appliance (cisco-sa-20130626-wsa)

According to its self-reported version, the version of Cisco Web Security Appliance running on the remote host has the following vulnerabilities : - Multiple unspecified vulnerabilities exist in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

Multiple Vulnerabilities in Cisco Email Security Appliance (cisco-sa-20130626-esa)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

CVE-2013-3384

CVE-2013-3384 affects Cisco IronPort AsyncOS web framework across multiple Cisco security appliances (WSA, ESA, CSPMA). The vulnerability allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL. Affected versions include Cisco Web Security Appliance...

CVE-2012-3384

CVE-2012-3384 describes a CSRF vulnerability in WordPress’s customizer, present in WordPress versions before 3.4.1, that could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The linked records confirm the affected product (WordPress) and the vulner...

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

FreeBSD Ports: torcs

The remote host is missing an update to the system as announced in the referenced advisory. VID e7fd27b2-3ae9-11e1-8b5c-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID e7fd27b2-3ae9-11e1-8b5c-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3384

Cross-site scripting XSS vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102...

CVE-2011-3384

CVE-2011-3384 affects the Sage Firefox add-on (versions 1.3.10 and earlier). The root cause is improper processing during HTML page output based on feed information, enabling a cross-site scripting (XSS) vulnerability that could allow arbitrary scripts to run in the user’s browser. The documented...

CVE-2010-3384

The 1 torcs, 2 nfsperf, 3 accc, 4 texmapper, 5 trackgen, and 6 nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3384

The CVE-2010-3384 entry affects TORCS 1.3.1, specifically the scripts (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac. The root cause is that these scripts place a zero-length directory name in LD_LIBRARY_PATH, enabling local users to load a Trojan horse shared libra...