CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2016-4552

CVE-2016-4552 affects Roundcube Webmail prior to 1.2.0. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the href attribute in an area tag within an e-mail message. Public references consistently describe it as a remote XSS ...

CVE-2016-4552

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message...

CVE-2015-4552

CVE-2015-4552 describes an XSS vulnerability in the MyBB (MyBulletinBoard) quick edit feature ( xmlhttp.php ) prior to version 1.8.5. The issue allows remote attackers to inject arbitrary web script or HTML via the content of a post. The NVD entry lists affected software as MyBB before 1.8.5, wit...

CVE-2015-4552

Cross-site scripting XSS vulnerability in the quick edit function in xmlhttp.php in MyBB aka MyBulletinBoard before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post...

CVE-2014-4552

Cross-site scripting XSS vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight spotlightyour plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the paymentType parameter...

CVE-2014-4552

CVE-2014-4552 describes a cross-site scripting (XSS) vulnerability in the Spotlight WordPress plugin (

CVE-2013-4552

The CVE affects the drupalauth module for simpleSAMLphp, specifically lib/Auth/Source/External.php in versions before 1.2.2. The underlying issue enables remote attackers to authenticate as an arbitrary user by manipulating the uid value in a cookie, effectively bypassing authentication. This con...

CVE-2012-4552

Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase file...

CVE-2012-4552

Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase file...

CVE-2012-4552

PLIB 1.8.5 is affected by a stack-based buffer overflow in the error function (ssg/ssgParser.cxx) that can be triggered by a crafted 3D model file (e.g., .ase), allowing remote code execution. Public advisories confirm the issue and show remediation guidance; upgrades to newer PLIB versions fix t...

Fedora Update for plib FEDORA-2012-17482

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : plib-1.8.5-8.fc17 (2012-17465)

Fix a bufferoverflow in ssgParser::error CVE-2012-4552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 18 : plib-1.8.5-8.fc18 (2012-17517)

Fix a bufferoverflow in ssgParser::error CVE-2012-4552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Scientific Linux Security Update : nfs-utils on SL5.x i386/x86_64

It was discovered that nfs-utils did not use tcpwrappers correctly. Certain hosts access rules defined in '/etc/hosts.allow' and '/etc/hosts.deny' may not have been honored, possibly allowing remote attackers to bypass intended access restrictions. CVE-2008-4552 This updated package also fixes th...

CVE-2011-4552

CVE-2011-4552 affects One Click Orgs prior to version 1.2.3, with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the description field of (1) a new vote or (2) the eject member proposal feature. The connected Red Hat, NVD...

CVE-2010-4552

The CVE pertains to IBM Lotus Notes Traveler before 8.5.1.1, where a memory leak in processing emails with embedded objects for iPhone clients can lead to denial of service via memory consumption and daemon outage. Affected component: Lotus Notes Traveler; root cause: memory leak. Exploitation de...

CVE-2010-4552

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service memory consumption and daemon outage by sending many embedded objects in e-mail messages for iPhone clients...

CentOS 5 : nfs-utils (CESA-2009:1321)

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...