66 matches found
CVE-2014-4939
creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39253...
CVE-2013-4939
Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web...
CVE-2013-4940
Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML...
CVE-2013-4940
The CVE-2013-4940 entry represents a cross-site scripting (XSS) vulnerability in the Yahoo! YUI IO Utility component (io.swf) that is triggered via a crafted URL. Affected are Yahoo! YUI 3.10.2 usage and Moodle-integrations up to Moodle 2.1.10, 2.2.x up to 2.2.10/2.2.11, 2.3.x up to 2.3.8, 2.4.x ...
CVE-2012-4939
Cross-site scripting XSS vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field...
CVE-2012-4939
SolarWinds Orion IPAM IPAMSummaryView.aspx is affected by a reflected XSS in the IPAM web interface prior to 3.0–HotFix1. An attacker can inject script via the "Search for an IP address" field, which could execute in a logged-in user’s browser and potentially lead to information leakage or creden...
SolarWinds Orion IPAM web interface reflected xss vulnerability
Overview SolarWinds Orion IPAM web interface contains a reflected cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'SolarWinds Orion IPAM web interface contains a reflected cross-site scripting vulnerability. ...
Security fix for the ALT Linux 6 package pidgin version 2.10.4-alt0.M60P.1
June 28, 2012 Gleb Fotengauer-Malinovskiy 2.10.4-alt0.M60P.1 - p6 security update fix CVE-2012-2214 CVE-2012-2318 CVE-2012-1178 CVE-2011-4939...
Pidgin < 2.10.2 Multiple DoS
The version of Pidgin installed on the remote host is earlier than 2.10.2 and is potentially affected by the following issues : - A denial of service vulnerability NULL pointer dereference in the 'pidginconvchatrenameuser' function in 'gtkconv.c'. Remote attackers can trigger the vulnerability by...
[ MDVSA-2012:029 ] pidgin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:029 http://www.mandriva.com/security/ Package : pidgin Date : March 16, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in pidgin:...
CVE-2011-4939
CVE-2011-4939 affects Pidgin prior to 2.10.2, where the pidgin_conv_chat_rename_user function in gtkconv.c can trigger a NULL pointer dereference in an XMPP chat room when nicknames are changed, leading to a denial of service (application crash). Public details in the provided connected documents...
CVE-2010-4939
CVE-2010-4939 is a PHP remote file inclusion vulnerability affecting MailForm 1.2 (index.php). The underlying issue is unsafe handling of the theme parameter, allowing an attacker to include a URL and execute arbitrary PHP code on the server. CVSS v2 base score is 7.5 (HIGH) with network access, ...
CVE-2009-4939
AdPeeps 8.5d1 is affected by multiple cross-site scripting (XSS) vulnerabilities in index.php. The issues allow remote attackers to inject arbitrary web script or HTML via a large set of parameters (e.g., uid, campaignid, type, period, accname, loginpass, e9, from, message, idno, plus several for...
CVE-2009-4939
creationtimestamp| type| source ---|---|--- 2009-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8818 2010-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34389...
CVE-2008-4939
apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...
CVE-2008-4939
apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...
CVE-2008-4939
CVE-2008-4939 affects apertium 3.0.7 and enables local users to overwrite arbitrary files via a symlink attack on temporary files created by apertium-gen-deformat, apertium-gen-reformat, and related scripts (files such as /tmp/#####.lex.cc, /tmp/#####.deformat.l, /tmp/#####.reformat.l, /tmp/#####...
SuSE 10 Security Update : xorg-x11-Xvnc (ZYPP Patch Number 4939)
The previous xorg-x11 security update contained a flaw. Due to this some applications using the shared memory extension did not work properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
CVE-2007-4939
The CVE describes a heap-based buffer overflow in mplayerc.exe used by Media Player Classic (MPC) 6.4.9.0 and earlier, including variants like mympc, StormPlayer, and CD-Storm. Affected component is mplayerc.exe handling certain .avi files, where an indx truck size of 0xffffffff together with spe...