59 matches found
CVE-2014-5242
Cross-site scripting XSS vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving the multipageimagenavbox class in conjunction with an action=raw value...
CVE-2014-5242
Cross-site scripting XSS vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving the multipageimagenavbox class in conjunction with an action=raw value...
CVE-2014-5242
Affected software: MediaWiki 1.22.x (before 1.22.9) and 1.23.x (before 1.23.2). Vulnerability: Cross-site scripting (XSS) in mediawiki.page.image.pagination.js. Root cause / vector: attackers can inject arbitrary web script or HTML via the multipageimagenavbox class when action=raw is involved. I...
MediaWiki < 1.19.18 / 1.22.9 / 1.23.2 Multiple Vulnerabilities
According to its version number, the instance of MediaWiki running on the remote host is affected by the following vulnerabilities : - A flaw exists due to comments not being prepended to the JSONP callbacks. This allows a remote attacker, using a specially crafted SWF file, to perform a cross-si...
Updated mediawiki packages fix security vulnerabilities
MediaWiki before 1.23.2 is vulnerable to JSONP injection in Flash CVE-2014-5241, XSS in mediawiki.page.image.pagination.js CVE-2014-5242, and clickjacking between OutputPage and ParserOutput CVE-2014-5243. This update provides MediaWiki 1.23.2, fixing these and other issues...
CVE-2012-5242
creationtimestamp| type| source ---|---|--- 2012-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23573...
banana dance b.2.6 - Multiple Vulnerabilities
Advisory ID: HTB23118 Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: PHP File Inclusion CWE-98, Improper Access Control CWE-284, SQL...
banana dance b.2.6 - Multiple Vulnerabilities
banana dance b.2.6 - Multiple Vulnerabilities Advisory ID: HTB23118 Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: PHP File Inclusion...
Banana Dance B.2.6 Inclusion / Access Control / SQL Injection
Banana Dance version B.2.6 suffers from local file inclusion, remote SQL injection, and improper access control vulnerabilities. Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure...
Banana Dance B.2.6 Inclusion / Access Control / SQL Injection
Advisory ID: HTB23118 Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: PHP File Inclusion CWE-98, Improper Access Control CWE-284, SQL...
CVE-2011-5242
tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the certificate’s CN or subjectAltName, enabling MITM via an arbitrary valid certificate. Impact per sources: partial confidentiality and partial integrity, with network attack vector and no authentication requ...
openSUSE Security Update : xine-devel (xine-devel-483)
This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...
openSUSE 10 Security Update : xine-devel (xine-devel-5966)
This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...
CVE-2008-5242
The CVE-2008-5242 issue affects xine-lib up to 1.1.12/1.1.15, where demux_qt.c does not validate the count before calloc for STSD_ATOM, allowing a crafted media file to cause a denial of service and possibly execute arbitrary code. Publicly documented impacts include remote code execution in the ...
openSUSE 10 Security Update : pdns (pdns-5242)
pdns used predictable random numbers for DNS responses. Therfore attackers could generate spoofed DNS responses CVE-2008-1637. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-5242. The te...
CVE-2007-5242
HP OpenVMS 8.3 and earlier contain an unspecified vulnerability in SYS$EI1000.EXE and SYS$EI1000_MON.EXE that allows remote attackers to cause a denial of service (machine crash) via an oversize packet. The issue arises because the oversize packet is not properly discarded when the device has no ...
CVE-2006-5242
CVE-2006-5242 is a SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1. Remote attackers can execute arbitrary SQL commands via unspecified vectors. The connected sources confirm the affected product and version range, but provide no exploit details or remediatio...