45 matches found
CVE-2016-4612
CVE-2016-4612 is a reserved/duplicate entry and is not used.
Apple iTunes < 12.4.2 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes running on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker can...
Apple iTunes < 12.4.2 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker c...
CVE-2015-4612
TYPO3 FAQ - Frequently Asked Questions (js_faq) extension prior to version 1.2.1 is affected by a SQL injection vulnerability. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, potentially impacting data confidentiality and integrity. The base ...
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1636-1)
phpMyAdmin on openSUSE 12.3 and 13.1 was updated to 4.1.14.8. This update fixes one vulnerability. - Security fixes : - PMASA-2014-17 CVE-2014-9218, CWE-661 CWE-400 boo908363 http://www.phpmyadmin.net/homepage/security/PMASA-2014- 17.php - sf4611 security DOS attack with long passwords phpMyAdmin...
openSUSE Security Update : icecast (openSUSE-SU-2012:0352-1)
Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-153. The text description of this...
openSUSE Security Update : icecast (openSUSE-SU-2012:0333-1)
Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries CVE-2011-4612. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update icecast-5932. The text description o...
CVE-2013-4612
The CVE-2013-4612 entry concerns REDCap prior to version 5.1.0 , with multiple cross-site scripting (XSS) vulnerabilities. The reports indicate remote attackers could inject arbitrary web script/HTML via unspecified vectors across different modules. The connected documents confirm the affected pr...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
CVE-2012-4612
CVE-2012-4612 is an XSS vulnerability in RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the primary sources, affected products include RSA DPM Ap...
Fedora Update for icecast FEDORA-2012-16147
Check for the Version of icecast OpenVAS Vulnerability Test Fedora Update for icecast FEDORA-2012-16147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for icecast FEDORA-2012-16147
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : icecast-2.3.3-1.fc17 (2012-16147)
Upgrade to new upstream release, fixing CVE. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2010-4612
Hycus CMS 1.0.3 is affected by CVE-2010-4612: multiple SQL injection in index.php when magic_quotes_gpc is disabled. Vulnerable parameters include user_name and usr_email (hregister.html, hlogin.html), useremail (forgotpass.html), and q (search.html). Root cause is input sanitation flaws allowing...
Cross-site Scripting (XSS) Vulnerabilities in PortalApp
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PortalApp which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in PortalApp 1.1 The vulnerability exists due to input sanitation error in multiple parameters ...
CVE-2009-4612
Multiple cross-site scripting XSS vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 jspsnoop/, 2 jspsnoop/ERROR/, and 3 jspsnoop/IOException/, and possibly t...
CVE-2009-4612
CVE-2009-4612 refers to multiple cross-site scripting (XSS) flaws in Mort Bay Jetty 6.1.x (up to 6.1.21). An attacker could remotely exploit via PATH_INFO in the WebApp JSP Snoop page to inject scripts in a user’s browser, potentially compromising cookies and session data. Affected products in th...
