209 matches found
JVN#30636823: WordPress plugin "WP Retina 2x" vulnerable to cross-site scripting
The WordPress plugin "WP Retina 2x" contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. Products Affected ...
ILIAS < 5.2.3 XSS Vulnerability
ILIAS eLearning is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2016-6799
Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods Log.v, Log.d, Log.i, Log.w, and Log.e are stored in a series of circular buffers on the device. By default, a maximum of four 16 KB rotated logs are kept in addition...
Fortinet FortiAnalyzer XSS Vulnerability (FG-IR-16-051)
Fortinet FortiAnalyzer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Web Gateway OS Command Injection Vulnerability
Symantec Web Gateway is prone to a OS command injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Web Gateway 5.2.2 OS Command Injection
------------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.2 newwhitelist.php OS Command Injection Vulnerability ------------------------------------------------------------------------------------ - Software Link: https://www.symantec.com/ -...
Fortinet FortiGate Reflected XSS Vulnerability (FG-IR-15-005)
Fortinet FortiGate is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
strongswan -- Denial-of-service and potential remote code execution vulnerability
StrongSwan Project reports A denial-of-service and potential remote code execution vulnerability triggered by crafted IKE messages was discovered in strongSwan. Versions 5.2.2 and 5.3.0 are affected...
KLA10510 Multiple vulnerabilities in Cisco IOS
An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...
[KIS-2014-19] Symantec Web Gateway <= 5.2.1 (restore.php) OS Command Injection Vulnerability
------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability ------------------------------------------------------------------------------ - Software Link: http://www.symantec.com/web-gateway/ - Affecte...
Symantec Web Gateway 5.2.1 OS Command Injection Vilnerability
Symantec Web Gateway versions 5.2.1 and below suffer from a remote OS command injection vulnerability. ------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability...
Symantec Web Gateway Unspecified Remote Command Execution Vulnerability (Dec 2014)
Symantec Web Gateway is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Web Gateway OS Authenticated Command Injection
SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to operating system command injection by an authenticated but less-privileged user. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Web Gateway Appliance | 5.2.1 and prior | Symantec Web Gateway 5.2...
vbShout 5.2.2 - Remote/Local File Inclusion Vulnerability
No description provided by source. + + Title: vbShout 5.2.2 Remote/Local File Inlcusion Mod/Admin + Author: fred777 - fred777.5x.to + Link: http://www.dragonbyte-tech.com/vbecommerce.php?do=purchase&act=product&id=2 + Vuln: vbshout.php?do=path/fileNULL-Byte + Greetzz to: SceneCoderz + Contact:...
IA eMailServer Corporate Edition Version <= 5.2.2 - DoS Exploit
No description provided by source. ===== Start IAeMailServerDOS.pl ===== Usage: IAeMailServerDOS.pl ip IAeMailServerDOS.pl 127.0.0.1 True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. Download: http://www.tnsoft.com/ use IO::Socket; use strict; my$socket = ; i...
CVE-2013-0314
The CVE-2013-0314 issue affects JBoss Enterprise Portal Platform 5.2.2 through the GateIn Portal export/import gadget, where importing Zip files did not properly require authentication. This allowed remote attackers to modify site contents, delete sites, or alter portlet access controls. Red Hat ...
CVE-2012-3532
CVE-2012-3532 is a CSRF vulnerability in the GateIn Portal component of JBoss Enterprise Portal Platform 5.2.2 and earlier. The issue could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, with potential partial confidentiality, integrity, and availa...
CVE-2013-0314
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets...
CSRF on jmx-console allows invocation of operations on mbeans
Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...