52 matches found
SPDY protocol <=3 协议信息泄露漏洞
CVE ID:CVE-2012-4930 SPDY是Google开发的基于传输控制协议TCP的应用层协议。 Mozilla Firefox, Google Chrome及其他多个产品使用的SPDY协议3，执行压缩数据加密时没有正确模糊未加密数据的长度，可通过中间人攻击的攻击者可通过提交一系列猜测请求，观察到压缩数据长度的变化也称CRIME攻击来获得明文HTTP头信息，造成敏感信息泄露如cookie信息。 0 SPDY protocol 3及之前版本 厂商解决方案 用户可参考如下供应商获得最新版本的产品： http://www.google.com/chrome...
Fedora Update for condor FEDORA-2012-3263
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : condor-7.7.5-0.2.fc17.2 (2012-3263)
Update to latest development release 7.7.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora 15 : condor-7.7.5-0.2.fc15 (2012-3363)
Update to latest development release 7.7.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora Update for condor FEDORA-2012-3341
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4930
Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...
CVE-2010-4930
Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...
CVE-2009-4930
CVE-2009-4930 describes a cross-site scripting (XSS) vulnerability in the SunGard Banner Student System 7.4, specifically the twbkwbis.P_SecurityQuestion (Change Security Question) page. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the New Question fiel...
CVE-2009-4930
Cross-site scripting XSS vulnerability in the twbkwbis.PSecurityQuestion aka Change Security Question page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web script or HTML via the New Question field...
CVE-2008-4930
CVE-2008-4930 affects MyBB (aka MyBulletinBoard) 1.4.2. An uploaded file with a nonstandard file type containing HTML sequences can be processed as HTML by Internet Explorer’s content inspection, due to incomplete MIME sniffing protection. This can enable XSS and other attacks. The NVD entry list...
CVE-2007-4930
The CVE-2007-4930 entry covers multiple CSRF vulnerabilities in the AXIS 207W camera. The affected product is the AXIS 207W network camera. The issues allow remote attackers to perform administrator actions via specific endpoints: (1) axis-cgi/admin/restart.cgi, (2) axis-cgi/admin/pwdgrp.cgi with...
