CVE-2014-4624

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x up to 7.0.2-43 expose MCUser and GSAN passwords via Java API calls without authentication (remote information disclosure). VMware vSphere Data Protection (VDP) 5.x also vulnerable via Java API access to retrieve credential...

CVE-2011-4624

The CVE-2011-4624 entry refers to a Cross-Site Scripting (XSS) flaw in the WordPress GRAND FlAGallery plugin (flash-album-gallery) specifically in facebook.php, exploitable before version 1.57 via the i parameter. Connected documents (e.g., NUCLEI template and OpenVAS entry) corroborate this XSS ...

CVE-2013-4624

Multiple cross-site scripting XSS vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via 1 the site parameter to engines/manager.jsp, 2 the searchString parameter to administration/ in a search action, or the 3 username, 4 firstName,...

CVE-2013-4624

CVE-2013-4624 concerns Jahia xCM 6.6.1.0 prior to hotfix 7. Multiple XSS vulnerabilities arise from insufficient sanitisation of user input in several vectors: (1) site parameter to engines/manager.jsp, (2) searchString parameter to administration/?do=users&sub=search, and (3) POST fields usernam...

Multiple XSS Vulnerabilities in Jahia xCM

Advisory ID: HTB23159 Product: Jahia xCM Vendor: Jahia Solutions Group SA Vulnerable Versions: 6.6.1.0 r43343 and probably prior Tested Version: 6.6.1.0 r43343 Vendor Notification: June 5, 2013 Vendor Patch: July 17, 2013 Public Disclosure: July 31, 2013 Vulnerability Type: Cross-Site Scripting...

Jahia xCM 6.6.1.0 r43343 Cross Site Scripting

Advisory ID: HTB23159 Product: Jahia xCM Vendor: Jahia Solutions Group SA Vulnerable Versions: 6.6.1.0 r43343 and probably prior Tested Version: 6.6.1.0 r43343 Vendor Notification: June 5, 2013 Vendor Patch: July 17, 2013 Public Disclosure: July 31, 2013 Vulnerability Type: Cross-Site Scripting...

CVE-2013-4624

creationtimestamp| type| source ---|---|--- 2013-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38683 2013-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38682...

CentOS 4 : mailman (CESA-2007:0779)

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

CVE-2010-4624

CVE-2010-4624 affects MyBB (MyBulletinBoard) up to version 1.4.12. Remote authenticated users can bypass restrictions on the number of [img] MyCodes by editing a post after creation. Root cause details are not elaborated in the provided documents beyond the basic description. Impact is limited to...

CVE-2009-4624

CVE-2009-4624 affects Nicecoder iDesk via a SQL injection in download.php that is exploitable through the cat_id parameter. The vulnerability is in the application layer where user-supplied cat_id can cause arbitrary SQL execution, with impact described as arbitrary SQL commands being run by an a...

CVE-2009-4624

creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9631...

CVE-2008-4624

creationtimestamp| type| source ---|---|--- 2008-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6785...

Debian: Security Advisory (DSA-1188-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1188-1 (mailman)

The remote host is missing an update to mailman announced via advisory DSA 1188-1. Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3636 Moritz...

SuSE 10 Security Update : nagios plugins (ZYPP Patch Number 4624)

fix possible buffer overflow during HTTP Location header parsing in checkhttp CVE-2007-5198 fix possible buffer overflow during snmpget parsing in checksnmp. CVE-2007-5623 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable...

mailman security and bug fix update

2.1.5.1-34.rhel4.6 - fix 200036 - canceling subscription confirmation crashes mailman - fix 205651 - CVE-2006-4624 logfile CRLF injection - fix 230939 - missing migrate-fhs script - fix 223191 - spam filters gets deleted when sender filter is edited - fix 242677 - wrong init script...

RHEL 4 : mailman (RHSA-2007:0779)

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

CVE-2007-4624

The CVE-2007-4624 entry describes a cross-site scripting (XSS) vulnerability in AbleDesign Dynamic Picture Frame 1.00, specifically in pframe.php where the img_url parameter can be exploited to inject arbitrary web script or HTML. The vulnerability stems from inadequate input validation of the im...

Debian DSA-1188-1 : mailman - format string

Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3636 Moritz Naumann discovered several cross-site scripting problems that could allow remote...

[SECURITY] [DSA 1188-1] New mailman packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 1188-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2006 http://www.debian.org/security/faq -...