88 matches found
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets CSS toke...
Mac OS X < 10.9.6 Multiple Vulnerabilities
Binary data 8645.prm...
CVE-2014-4497
CVE-2014-4497 affects Apple OS X before 10.10, where an integer signedness error in IOBluetoothFamily could allow a crafted app to execute code in kernel context or cause a denial of service by writing kernel memory. The vulnerability is tied to Bluetooth handling in OS X and is listed among OS X...
Fedora Update for openstack-nova FEDORA-2014-4188
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
Update to stable/grizzly release 2013.1.5 - Keep XenAPI security groups through migrate and resize - CVE-2013-4497 - Secure directory permissions in snapshots - CVE-2013-7048 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...
Fedora 20 : openstack-nova-2013.2.1-2.fc20 (2013-23524)
Update to stable/havana 2013.2.1 release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
CVE-2012-4497
The CVE-2012-4497 entry describes a Cross-site Scripting (XSS) vulnerability in the Drupal module Elegant Theme, specifically within the "3 slide gallery" in the 7.x-1.x line before 7.x-1.1. Affected component: Elegant Theme module (Drupal 7.x-1.x, prior to 7.x-1.1) where the slide URL is the vec...
CVE-2012-4497
Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...
CVE-2011-4497
CVE-2011-4497 affects the ASUS RT-N56U router with firmware prior to 1.0.1.4o. The QIS_wizard.htm page permits remote attackers to disclose the administrator password via a flag=detect request. This is an information-disclosure issue (no exploitation details provided in the primary CVE entry). Op...
ASUS RT-N56U Wireless Router 'QIS_wizard.htm' Password Information Disclosure Vulnerability
ASUS RT-N56U wireless router is prone to an information-disclosure vulnerability that exposes sensitive information. Successful exploits will allow unauthenticated attackers to obtain sensitive information of the device such as administrative password, which may aid in further attacks. ASUS RT-N5...
CVE-2010-4497
Cross-site scripting XSS vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4497
CVE-2010-4497 is an XSS vulnerability in the Collaborative Information Manager (CIM) server, as used in TIBCO CIM before 8.1.0 and ActiveCatalog before 1.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available documents do not provide d...
Debian DSA-2092-1 : lxr-cvs - missing input sanitizing
Dan Rosenberg discovered that in lxr-cvs, a code-indexing tool with a web frontend, not enough sanitation of user input is performed; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...
Cross site scripting
Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...
CVE-2009-4497
Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...
CVE-2009-4497
The CVE-2009-4497 entry is grounded in LXR Cross Referencer (lxr-cvs) web frontend, where Debian and OpenVAS/NVL references confirm a vulnerability caused by missing input sanitization. The issue enables cross-site scripting (XSS) via crafted input and affects lxr-cvs versions around 0.9.5/0.9.6 ...
