CentOS 4 : apache (CESA-2006:0618)

Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server available for free. A bug was found ...

CVE-2011-3918

The CVE-2011-3918 entry concerns the Android Zygote process: on Android 4.0.3 and earlier, Zygote accepts fork requests from processes with arbitrary UIDs, enabling a crafted app to cause a denial-of-service reboot loop. The issue is described in multiple sources (e.g., NVD/Red Hat entries) and i...

CVE-2011-3918

The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service reboot loop via a crafted application...

Oracle HTTP Server XSS Header Injection

Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...

CVE-2010-3918

Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site...

CVE-2010-3918

CVE-2010-3918 affects Fenrir Sleipnir 2.9.6 and earlier. The vulnerability allows a crafted web site to interact with the browser’s clipboard, enabling an attacker to read or modify clipboard contents via web content. Documents from JVN/JVNDB and Red Hat corroborate clipboard contents alteration/...

CVE-2010-3918

Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site...

CVE-2009-3918

Cross-site scripting XSS vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title...

CVE-2009-3918

The CVE applies to the Drupal Zoomify module. Affected versions are Zoomify 5.x before 5.x-2.2 and 6.x before 6.x-1.4. Root cause is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the node title. Impact, as stated, is that attack...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-example-pages apache-doc apache-devel apache modssl For more information, please visit the referenced security advisories. More details may also be...

SLES9: Security update for apache2,apache2-prefork,apache2-worker

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-worker apache2-prefork apache2 For more information, please visit the referenced security advisories. More details may also be found by searching for...

SLES9: Security update for apache2, apache2-prefork, apache2-worker

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-worker apache2-prefork apache2 For more information, please visit the referenced security advisories. More details may also be found by searching for...

SuSE9 Security Update : Apache (YOU Patch Number 12125)

This update fixes multiple bugs in apache : - cross-site scripting problem when processing the 'Expect' header. CVE-2006-3918 - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module...

Ubuntu: Security Advisory (USN-575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3918

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3918

CVE-2008-3918 affects Ovidentia 6.6.5. The vulnerability is a SQL injection in index.php triggered by the field parameter in a search action, allowing remote attackers to execute arbitrary SQL commands. NVD data indicates network attack vector, low attack complexity, no authentication, and partia...

USN-575-1: Apache vulnerabilities

It was discovered that Apache did not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user...

Debian Security Advisory DSA 1167-1 (apache)

The remote host is missing an update to apache announced via advisory DSA 1167-1. Several remote vulnerabilities have been discovered in the Apache, the worlds most popular webserver, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting XSS style attacks using web client components that can send arbitrary...

CVE-2007-5944

Cross-site scripting XSS vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server WAS 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are...