EMC Documentum Content Server Multiple Vulnerabilities (ESA-2015-131)

The version of EMC Documentum Content Server running on the remote host is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper authorization checks performed on subgroups within the dmsuperusers group. An authenticated, remote attacker can exploit...

EMC Documentum Content Server Code Execution

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed For detailed description see http://seclists.org/bugtraq/2015/Jul/51 New behavior introduced in CVE-2015-4532: API ?,c,execute domethod WITH METHOD='dmbptransition', ARGUMENTS=' repo repo...

Ubuntu: Security Advisory (USN-2342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2342-1: QEMU vulnerabilities

Michael S. Tsirkin, Anthony Liguori, and Michael Roth discovered multiple issues with QEMU state loading after migration. An attacker able to modify the state data could use these issues to cause a denial of service, or possibly execute arbitrary code. CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,...

CVE-2014-4532

The CVE-2014-4532 entry documents a cross-site scripting (XSS) vulnerability in the WordPress GarageSale plugin prior to version 1.2.3. The flaw exists in the templates/printAdminUsersList_Footer.tpl.php and allows remote attackers to inject arbitrary script or HTML via the page parameter. Affect...

CVE-2012-4532

Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...

CVE-2012-4532

CVE-2012-4532 affects Joomla! 2.5.x prior to 2.5.7, where the Language Switcher module (modules/mod_languages/tmpl/default.php) is vulnerable to cross-site scripting via PATH_INFO to index.php. The issue is an XSS in the Language Switcher component, enabling remote injection of script/HTML. The p...

CVE-2011-4532

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18165...

CVE-2009-4532

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

CVE-2009-4532

The CVE-2009-4532 issue affects the Drupal Webform module (5.x prior to 5.x-2.8 and 6.x prior to 6.x-2.8). The root cause is a Cross-site Scripting (XSS) vulnerability in a field label. An attacker must be a remote authenticated user with webform creation privileges, and can inject arbitrary web ...

Fedora Update for autofs FEDORA-2007-4532

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-4532

Cross-site scripting XSS vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action...

CVE-2008-4532

CVE-2008-4532 describes a reflected cross-site scripting vulnerability in MaxiScript Website Directory: index.php, exploitable via the keyword parameter in a search action. The flaw stems from improper handling of user input, allowing injection of arbitrary HTML/JavaScript. Impact: could enable a...

CVE-2008-4532

creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32455...

Debian Security Advisory DSA 969-1 (scponly)

The remote host is missing an update to scponly announced via advisory DSA 969-1. Max Vozeller discovered a vulnerability in scponly, a utility to restrict user commands to scp and sftp, that could lead to the execution of arbitray commands as root. The system is only vulnerable if the program...

CVE-2007-4532

CVE-2007-4532 (Soldat) affects Soldat game server 1.4.2 and earlier and dedicated server 2.6.2 and earlier. The issue allows remote attackers to cause a denial-of-service (client lockout) by sending a sequence of UDP join packets from a spoofed IP, which triggers temporary blacklisting of that IP...

CVE-2007-1221

CVE-2007-1221 affects the Xbox 360 hypervisor in kernel versions 4532 and 4548. The issue allows an attacker with physical access to force execution of the hypervisor syscall using a specific register set, bypassing the intended code protection. The vulnerability is local in nature (attack vector...

CVE-2006-4559

CVE-2006-4559 describes multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the context[path_to_root] parameter to several PHP endpoints, including art...

CVE-2006-4532

PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System YACS CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contextpathtoroot parameter...

CVE-2006-4532

Affected software: Yet Another Community System (YACS) CMS, version 6.6.1 and earlier. Vulnerability: PHP remote file inclusion in articles/article.php, where an attacker can supply a URL via context[path_to_root] to execute arbitrary PHP code. Impact: Arbitrary code execution with the same privi...