CVE-2014-4555

Cross-site scripting XSS vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2014-4555

Cross-site scripting XSS vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2014-4555

CVE-2014-4555 is an XSS vulnerability in the WordPress plugin Style It (versions 1.0 and earlier). The flaw exists in fonts/font-form.php and allows remote attackers to inject arbitrary JavaScript/HTML via the mode parameter. Exploitation status is not detailed in the provided documents, but mult...

Fedora Update for httpd FEDORA-2014-4555

Check for the Version of httpd OpenVAS Vulnerability Test Fedora Update for httpd FEDORA-2014-4555 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2013-4555

Cross-site request forgery CSRF vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors...

CVE-2013-4555

Cross-site request forgery CSRF vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors...

CVE-2013-4555

Cross-site request forgery CSRF vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors...

CVE-2013-4555

SPIP’s CSRF flaw CVE-2013-4555 affects action/logout.php in SPIP versions before 2.1.24. An attacker can hijack a user’s session by sending a logout request via unspecified vectors, enabling partial confidentiality/integrity/availability impact as described in the CVE entry. Multiple connected fe...

CVE-2012-4555

CVE-2012-4555 affects Red Hat Certificate System (RHCS) pki-tps before version 8.1.3. The vulnerability arises from improper handling of interruptions during token format operations, allowing a remote attacker to cause a denial of service via a NULL pointer dereference, crashing the Apache httpd ...

Moderate: Red Hat Security Advisory: pki security update

Updated pki-common and pki-tps packages that fix multiple security issues are now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Scientific Linux Security Update : graphviz on SL5.x i386/x86_64

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

Scientific Linux Security Update : squirrelmail on SL4.x, SL5.x (20120208)

SquirrelMail is a standards-based webmail package written in PHP. A cross-site scripting XSS flaw was found in the way SquirrelMail performed the sanitization of HTML style tag content. A remote attacker could use this flaw to send a specially crafted Multipurpose Internet Mail Extensions MIME...

CentOS Update for squirrelmail CESA-2012:0103 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

squirrelmail security update

1.4.8-5.0.1.el57.13 - Remove Redhat splash screen images 1.4.8-5.13 - fix typo in CVE-20210-4555 patch 1.4.8-5.12 - patch for CVE-2010-2813 was not complete 1.4.8-5.11 - fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in Mail Fetch plugin - fix: CVE-2010-2813 : DoS disk space...

Mac OS X Multiple Vulnerabilities (2012-001)

This host is missing an important security update according to Mac OS X Update/Mac OS X Security Update 2012-001. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...

CVE-2011-4555

CVE-2011-4555 affects One Click Orgs prior to version 1.2.3. The issue is that user accounts do not require unique e-mail addresses, enabling remote authenticated users to cause login disruption (denial of service) or to spoof votes/comments by selecting a conflicting e-mail address. Root cause: ...

Debian: Security Advisory (DSA-2291-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for squirrelmail MDVSA-2011:123 (squirrelmail)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 2291-1] squirrelmail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2291-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 8, 2011 http://www.debian.org/security/faq -...