Epicor Password Disclosure / Cross Site Scripting

"Epicor Enterprise vulnerabilities" - Affected vendor: Epicor Software Corporation - Affected system: Epicor Enterprise - Version 7.4 - Vendor disclosure date: May 13th, 2014 - Public disclosure date: September 30th, 2014 - Status: Fixed - Associated CVEs: 1 CVE-2014-4311 Password values not mask...

Gentoo Security Advisory GLSA 201206-24 (apache tomcat)

The remote host is missing updates announced in advisory GLSA 201206-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Update for ReviewBoard FEDORA-2011-15935

Check for the Version of ReviewBoard OpenVAS Vulnerability Test Fedora Update for ReviewBoard FEDORA-2011-15935 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for ReviewBoard FEDORA-2011-15935

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ReviewBoard FEDORA-2011-15933

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4312

CVE-2011-4312 affects Review Board’s commenting system, enabling cross-site scripting (XSS) via the diff viewer and screenshot components. The vulnerability exists in versions prior to 1.5.7 and 1.6.x prior to 1.6.3, where user-supplied content could inject arbitrary JavaScript/HTML. Supported do...

CVE-2009-4312

CVE-2009-4312 concerns the Microsoft Windows Indeo codec and, per the provided documents, describes an unspecified vulnerability in the Indeo codec on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2 that could allow remote code execution via crafted media content. The OpenVAS entries also refer...

CVE-2008-4312

CVE-2008-4312 is rejected and not used.

CVE-2008-4312

...

CVE-2007-4312

The CVE-2007-4312 entry concerns a SQL injection in Php Blue Dragon CMS 3.0.0. The vulnerability occurs in index.php during the “print articles” action, where the parameter article_id can be used by remote attackers to execute arbitrary SQL commands. Connected sources (NVD/NVD-derived records and...

CVE-2005-4312

The CVE-2005-4312 entry describes an SQL injection vulnerability in AlmondSoft Almond Classifieds 5.02, exploitable via the id parameter in index.php. The affected component is the web application’s index.php handling of id values, enabling remote attackers to inject SQL commands. CVSS2 context f...