CVE-2014-4524

Cross-site scripting XSS vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ref parameter...

CVE-2014-4524

CVE-2014-4524 affects the WordPress plugin “WP Easy Post Types” (plugin component: media.php) before version 1.4.4. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the ref parameter. The issue is documented across mult...

Updated moodle package fixes security vulnerabilities

Some files were being delivered with incorrect headers in Moodle before 2.4.7, meaning they could be cached downstream CVE-2013-4522. Cross-site scripting in Moodle before 2.4.7 due to JavaScript in messages being executed on some pages CVE-2013-4523. The file system repository in Moodle before...

CVE-2013-4524

CVE-2013-4524 — Moodle directory traversal . Affected Moodle branches: 2.2.11 and older; 2.3.x before 2.3.10; 2.4.x before 2.4.7; 2.5.x before 2.5.3. The issue enables a remote authenticated user to read arbitrary files via a .. in the path to repository/filesystem/lib.php. The vulnerability is c...

Fedora 18 : xlockmore-5.40-3.fc18 (2012-16454)

fixed 'CVE-2012-4524 xlockmore: Screensaver crash screen lock bypass when 'dclock' mode used' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : xlockmore-5.40-3.fc16 (2012-16490)

fixed 'CVE-2012-4524 xlockmore: Screensaver crash screen lock bypass when 'dclock' mode used' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for xlockmore FEDORA-2012-16485

Check for the Version of xlockmore OpenVAS Vulnerability Test Fedora Update for xlockmore FEDORA-2012-16485 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for xlockmore FEDORA-2012-16485

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: xlockmore, ja-xlockmore

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

CVE-2011-4524

The CVE-2011-4524 entry concerns Advantech/BroadWin WebAccess prior to version 7.0. The vulnerability is a buffer overflow triggered by a long string value in unspecified parameters, enabling remote code execution. Connected documents corroborate a family of vulnerabilities in WebAccess affecting...

Fedora Update for mhonarc FEDORA-2011-3357

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mhonarc FEDORA-2011-3390

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mhonarc-2.6.18-3.fc13 (2011-3357)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Fedora 14 : mhonarc-2.6.18-3.fc14 (2011-3390)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Fedora 15 : mhonarc-2.6.18-3.fc15 (2011-3344)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Mandriva Update for MHonArc MDVSA-2011:003 (MHonArc)

Check for the Version of MHonArc OpenVAS Vulnerability Test Mandriva Update for MHonArc MDVSA-2011:003 MHonArc Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for MHonArc MDVSA-2011:003 (MHonArc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4524

Cross-site scripting XSS vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by ipt and ipt sequences...

CVE-2010-4524

CVE-2010-4524 is an XSS in MHonArc where improper escaping of certain HTML sequences (SCRIPT tag) in lib/mhtxthtml.pl allowed remote script injection. Known affected line: MHonArc 2.6.16, with exploitation via malformed start/end SCRIPT tags. Connected advisories show Fedora updates addressing bo...

Fedora Update for qt FEDORA-2010-4524

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...