bom.gov.au XSS vulnerability

Vulnerable URL: http://www.bom.gov.au/includes/marketing2.php?id="'; Details: Description| Value ---|--- Patched:| Yes, at 19.11.2015 Latest check for patch:| 19.11.2015 21:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3739 Google Pagerank| 8 VIP website...

bom.gov.au XSS vulnerability

Vulnerable URL: http://www.bom.gov.au/jsp/awap/rain/index.jsp?colour=blkwht=latest=0=totals=daily=%22%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.11.2015 Latest check for patch:| 19.11.2015 21:05 GMT Vulnerability type:| XSS Vulnerability...

Oracle: Security Advisory (ELSA-2007-0705)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Safari Multiple Vulnerabilities-01 (Sep 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2015-3739

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3739

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3739

CVE-2015-3739 affects WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, with memory corruption and application crash as describe...

CVE-2013-3739

Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files via a .. dot dot in the mapname parameter in a showconfig action...

CVE-2014-3739

Zenoss 4.2.5 is affected by an open redirect in zport/acl_users/cookieAuthHelper/login_form, allowing an attacker to redirect users to arbitrary sites via the came_from parameter. The issue originates from improper handling of the came_from input, enabling phishing-like redirections. No explicit ...

CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C

============================================= WEBERA ALERT ADVISORY 01 - Discovered by: Anthony Dubuissez - Severity: high - CVE Request - 03/06/2013 - CVE Assign - 03/06/2013 - CVE Number - CVE-2013-3739 - Vendor notification - 03/06/2013 - Vendor reply - No reply - Public disclosure - 10/06/201...

Oracle Linux 3 : kernel (ELSA-2007-1049)

From Red Hat Security Advisory 2007:1049 : Updated kernel packages that fix several security issues and a bug in the Red Hat Enterprise Linux 3 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages conta...

Oracle Linux 4 : kernel (ELSA-2007-0939)

From Red Hat Security Advisory 2007:0939 : Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the core of the...

Oracle Linux 4 : xorg-x11 (ELSA-2006-0665)

From Red Hat Security Advisory 2006:0665 : Updated X.org packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Windo...

CVE-2013-3739

creationtimestamp| type| source ---|---|--- 2013-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26125...

CVE-2012-3739

CVE-2012-3739 affects Apple iOS prior to 6. The vulnerability lies in the Passcode Lock implementation where, via camera-related interaction, a physically proximate attacker can bypass the intended passcode requirement on the lock screen. Impact as described: bypass of lock. Remediation: update t...

Slackware: Security Advisory (SSA:2006-259-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libpng FEDORA-2012-3739

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3739

Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/Freeway/boxes/lastproduct.php and certain other files...

CVE-2011-3739

Freeway 1.5 Alpha is affected by an information-disclosure vulnerability where remote attackers can obtain the installation path by directly requesting certain PHP files (e.g., templates/Freeway/boxes/last_product.php). The issue stems from error messages revealing filesystem paths. Affected comp...

CVE-2010-3739

The CVE-2010-3739 issue affects IBM DB2 UDB 9.5 prior to Fix Pack 6a, where the audit facility in the Security component uses instance-level audit settings to capture CONNECT/AUTHENTICATION events in cases where database-level settings were intended. This could allow remote attackers to connect w...