174 matches found
Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2017-4378
This CVE entry is rejected and not used; it does not represent an active vulnerability.
CVE-2012-4378
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...
CVE-2012-4378
CVE-2012-4378 involves multiple XSS vulnerabilities in MediaWiki exploited when unspecified JavaScript gadgets are used. Affected are MediaWiki versions before 1.18.5 and 1.19.x before 1.19.2 . The flaw allows remote attackers to inject arbitrary web script or HTML via the userlang parameter to w...
CVE-2016-4378
The CVE affects HP XP P9000 Command View Advanced Edition Software (before 8.4.1-00) and XP7 Command View Advanced Edition Suite (before 8.4.1-00). Vulnerable components include Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD)...
CVE-2015-4378
Cross-site scripting XSS vulnerability in the Crumbs module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "Administer Crumbs" permission to inject arbitrary web script or HTML via a custom breadcrumb separator...
CVE-2015-4378
CVE-2015-4378 affects the Drupal Crumbs module (7.x-2.x) prior to 7.x-2.3. The vulnerability is a Cross-site scripting (XSS) flaw caused by insufficient sanitization of the custom breadcrumb separator, allowing remote authenticated users with the 'Administer Crumbs' permission to inject arbitrary...
Crumbs - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-082
This module enables you to add navigation to your webpages colloquially referred to as "breadcrumbs". The module doesn't sufficiently sanitize custom HTML separators for breadcrumbs, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacke...
CVE-2014-4378
CVE-2014-4378 affects CoreGraphics in Apple iOS before 8 and Apple TV before 7. A crafted PDF can trigger an out-of-bounds read, potentially allowing an attacker to obtain sensitive information or cause an application crash (DoS). The vulnerability is due to improper bounds checking in PDF handli...
CVE-2011-4378
CVE-2011-4378 is rejected/not used and does not represent an active vulnerability entry.
CVE-2013-4378
CVE-2013-4378 describes a cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java of JavaMelody 1.46 and earlier. The underlying issue is injection of arbitrary web script or HTML via a crafted X-Forwarded-For header, enabling an attacker to influence pages rendered to othe...
FreeBSD Ports: mediawiki
The remote host is missing an update to the system as announced in the referenced advisory. VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: mediawiki
The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
Scientific Linux Security Update : HelixPlayer on SL4.x i386/x86_64
Multiple security flaws were discovered in RealPlayer. Helix Player and RealPlayer share a common source code base; therefore, some of the flaws discovered in RealPlayer may also affect Helix Player. Some of these flaws could, when opening, viewing, or playing a malicious media file or stream, le...
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwindec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Copyright: Copyright c 2010...
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...