192 matches found
Low: Red Hat Security Advisory: jboss-ec2-eap security update
An updated jboss-ec2-eap package that fixes one security issue is now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 6 running on the Amazon Web Services AWS Elastic Compute Cloud EC2. The Red Hat Security Response Team has rated this update as having low...
APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 Apple TV Software Update 4.4 is now available and addresses the following: Apple TV Available for: Apple TV 4.0 through 4.3 Impact: An attacker with a privileged network position may intercept user...
CVE-2010-3427
Open Classifieds 1.7.0.2 is affected by multiple reflected cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) desc, (2) price, (3) title, and (4) place to index.php, and (5) subject to contact.htm (related to...
CVE-2010-3427
Multiple cross-site scripting XSS vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 desc, 2 price, 3 title, and 4 place parameters to index.php and the 5 subject parameter to contact.htm, related to content/contact.php...
CVE-2009-3427
Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...
CVE-2009-3427
The CVE-2009-3427 issue affects Kayako SupportSuite, specifically version 3.50.06, which is vulnerable to a cross-site scripting (XSS) flaw in the ticket subject field. The underlying problem is insufficient sanitization of input passed to the subject field, allowing an attacker to inject arbitra...
CVE-2008-3427
CVE-2008-3427 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-3427
SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...
CVE-2007-3427
Affected software: phpTrafficA 1.4.2 and earlier. The vulnerability is in index.php (stats action) where the pageid parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling/validation of pageid leading to injection. Impact: as sta...
CVE-2006-3427
CVE-2006-3427 affects Microsoft Internet Explorer 6. The issue arises when declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, causing a null dereference and a denial of service (crash). Documents do not provide patch/version details or ...
CVE-2005-3427
The CVE-2005-3427 issue affects Cisco’s Management Center (MC) for IPS Sensors (IPS MC) version 2.1. The vulnerability arises when port field values are omitted while generating the Cisco IOS IPS configuration file, which can cause some signatures to be disabled and may make detection easier to e...