ucl.ac.uk XSS vulnerability

Vulnerable URL: https://www.ucl.ac.uk/bartlett/heritage/latest?metaUclSubject=--%3E%3C/script%3E%3C/title%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:51 GMT Vulnerability type:| XSS Vulnerability...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-106) (SLOTH)

java-180-openjdk was updated to version 7u95 to fix several security issues. bsc962743 The following vulnerabilities were fixed : - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472:...

Security update for java-1_8_0-openjdk (critical)

java-180-openjdk was updated to version 7u95 to fix several security issues. bsc962743 The following vulnerabilities were fixed: - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472:...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2015-696)

java-180-openjdk was updated to fix 24 security issues. These security issues were fixed : - CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data - CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial...

Security update for java-1_8_0-openjdk (important)

java-180-openjdk was updated to fix 24 security issues. These security issues were fixed: - CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data - CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial deni...

CVE-2015-4916

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908...

Design/Logic Flaw

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916...

CVE-2015-4916

CVE-2015-4916 affects Oracle Java SE 8u60 and JavaFX 2.2.85. Affects confidentiality via unknown vectors; impact per NVD is Partial confidentiality with network access and no integrity/availability impact reported. Root cause and specific exploit vectors are not publicly detailed in the provided ...

CVE-2015-4916

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908...

CVE-2010-4916

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

CVE-2010-4916

CVE-2010-4916 affects ColdGen ColdUserGroup 1.06. The vulnerability is a SQL injection in ColdGen ColdUserGroup’s index.cfm, exploitable via the ArticleID or LibraryID parameter to allow remote execution of arbitrary SQL commands. Exploitation specifics, affected versions beyond 1.06, and remedia...

CVE-2010-4916

creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14935...

CVE-2009-4916

The CVE-2009-4916 vulnerability affects Cisco ASA 5580 series devices running software before 8.1(2). The issue, tied to Bug CSCsq80095, is an unspecified flaw that allows remote authenticated users to trigger a denial of service by performing a login action during failover replication, causing a...

Carom3D 5.06 Unicode Buffer Overrun/DoS Vulnerability

Summary Carom 3D is an online multi-user billiard game created with special 3D graphic effects bringing every aspect such as 6 ball, 9 ball, 8 ball and other Billiard games to life. Description The world famous korean game Carom3D suffers from a buffer overflow and a denial of service...

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2008-4916

CVE-2008-4916 describes a denial-of-service vulnerability in the guest virtual device driver that could crash the host OS. The issue affects VMware products including VMware Workstation (pre-5.5.9/6.x), VMware Player (pre-1.0.9/2.x), VMware ACE (pre-1.0.8/2.x), VMware Server (1.x before 1.0.8/2.0...

Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)

The Microsoft Foundation Class Library is a library that wraps portions of the Windows API in C++ classes,including functionality that enables them to use a default application framework. The vulnerability is due to an error in the FileFind Class that can be exploited via applications that use th...

CVE-2007-4916

CVE-2007-4916 is a heap-based buffer overflow in Microsoft Foundation Class (MFC) Library’s FileFind::FindFile() used by MFC42.dll/MFC42u.dll/MFC71.dll/MFC71u.dll and by Hewlett-Packard HP-related software (hpqutil.dll 2.0.0.138, HP All-in-One, Photo & Imaging Gallery 1.1). The overflow occurs wh...

CVE-2006-4916

This CVE-2006-4916 entry documents a SQL injection vulnerability in Tekman Portal (TR) 1.0, exploitable via the uye_id parameter in uye_profil.asp. The underlying issue is improper input handling that allows an attacker to manipulate SQL commands remotely, leading to potential data disclosure or ...