85 matches found
CVE-2017-4349
CVE-2017-4349 is rejected and does not represent an active vulnerability entry.
CVE-2015-4349
Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...
CVE-2015-4349
CVE-2015-4349 affects the Drupal Spider Contacts module. It is a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to hijack administrator actions for requests that delete contact categories. The issue is tied to the Spider Contacts module (not Drupal core) and is mitigated...
Fedora Update for phpMyAdmin FEDORA-2014-8577
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for phpMyAdmin FEDORA-2014-8581
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated phpmyadmin packages fix CVE-2014-4349
Updated phpmyadmin packages fix security vulnerability: In phpMyAdmin before 4.1.14, it is possible to trigger an XSS when hiding or unhiding a crafted table name in the navigation, due to unescaped HTML output in the navigation items hiding feature. Note that this vulnerability can only be...
MGASA-2014-0275 Updated phpmyadmin packages fix CVE-2014-4349
Updated phpmyadmin packages fix security vulnerability: In phpMyAdmin before 4.1.14, it is possible to trigger an XSS when hiding or unhiding a crafted table name in the navigation, due to unescaped HTML output in the navigation items hiding feature. Note that this vulnerability can only be...
CVE-2014-4349
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a 1 hide or 2 unhide action...
CVE-2014-4349
CVE-2014-4349 affects phpMyAdmin 4.1.x up to 4.1.14.1 and 4.2.x up to 4.2.4. Root cause: improper handling of table names during hide/unhide actions leads to cross-site scripting (XSS). Impact: remote authenticated users can inject arbitrary web script or HTML. Remediation: upgrade to 4.1.14.1 or...
Self-XSS due to unescaped HTML output in navigation items hiding feature.
PMASA-2014-3 Announcement-ID: PMASA-2014-3 Date: 2014-06-20 Summary Self-XSS due to unescaped HTML output in navigation items hiding feature. Description When hiding or unhiding a crafted table name in the navigation, it is possible to trigger an XSS. Severity We consider this vulnerability to be...
openSUSE Security Update : icedtea-web (openSUSE-SU-2013:1509-1)
This icedtea-web update fixes several security issues. Changes in icedtea-web : - update to 1.4.1 bnc840572 - Improved and cleaned Temporary internet files panel - NetX - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of loca...
CVE-2013-4349
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4540. Reason: This candidate was MERGED into CVE-2012-4540, since it was later discovered that it affected an additional version, but it does not constitute a regression error. Notes: All CVE users should reference...
CVE-2013-4349
CVE-2013-4349 is a merged/misused candidate that was incorporated into CVE-2012-4540 and is not a standalone active entry. Public materials corroborate a heap-based buffer overflow in icedtea-web related to triggering an event attached to an applet, with fixes documented in icedtea-web updates (e...
Fedora Update for icedtea-web FEDORA-2013-17016
Check for the Version of icedtea-web OpenVAS Vulnerability Test Fedora Update for icedtea-web FEDORA-2013-17016 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
[SECURITY] [DSA 2768-1] icedtea-web security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2768-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 04, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2768-1] icedtea-web security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2768-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 04, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2768-1 (icedtea-web - heap-based buffer overflow)
A heap-based buffer overflow vulnerability was found in icedtea-web, a web browser plugin for running applets written in the Java programming language. If a user were tricked into opening a malicious website, an attacker could cause the plugin to crash or possibly execute arbitrary code as the us...
Fedora Update for icedtea-web FEDORA-2013-17026
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...