CVE-2020-5267 Possible XSS vulnerability in ActionView

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2...

CVE-2020-5267

CVE-2020-5267 is an XSS vulnerability in ActionView’s JavaScript literal escape helpers. It affects Rails ActionView before 6.0.2.2 and 5.2.4.2, where views using j or escape_javascript may be vulnerable. The issue is fixed in version 6.0.2.2 and 5.2.4.2. Public connected documents corroborate th...

CVE-2019-5267

CVE-2019-5267 affects Huawei OceanStor SNS3096 V100R002C01. The vulnerability is described as an information disclosure flaw that can be exploited by attackers with low privileges through specific operations, potentially leading to exposure of sensitive information. NVD and Red Hat entries corrob...

Security Advisory - Information Disclosure Vulnerability in Some Huawei Products

Some Huawei products have an information disclosure vulnerability. Attackers with low privilege can exploit this vulnerability by performing some specific operations. Successful exploit of this vulnerability can cause some information disclosure. Vulnerability ID: HWPSIRT-2019-10408 This...

Solaris 10 (sparc) : 137080-07

SunOS 5.10: libpng Patch. Date this patch was last updated by Sun : Jul/18/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 137080-10

SunOS 5.10: libpng Patch. Date this patch was last updated by Sun : Jul/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 137081-07

SunOS 5.10x86: libpng Patch. Date this patch was last updated by Sun : Jul/18/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2018-5267

Cobham Sea Tel 121 build 222701 devices are affected by CVE-2018-5267, enabling a remote authentication bypass via direct requests to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html. The vulnerability allows bypass of authentication without user...

iu.edu XSS vulnerability

Vulnerable URL: http://www.iu.edu/iuinfo/backend/json.php?campus=iuk=crisis..." xany Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5267 VIP website status:| Yes Coordinated...

FreeBSD : Mozilla -- multiple vulnerabilities (aa1aefe3-6e37-47db-bfda-343ef4acb1b5)

Mozilla Foundation reports : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution a...

CVE-2016-5267

Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set...

CVE-2016-5267

Mozilla Firefox for Android is affected by CVE-2016-5267. Description: Firefox on Android prior to 48.0 allows remote attackers to spoof the address bar by combining left-to-right characters with a right-to-left character set. Impact: address-bar spoofing vulnerability. Root cause: handling of mi...

Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-5267

lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mtrand function to implement the randomstring and complexrandomstring functions, which makes it easier for remote attackers to predict password-recovery tokens via a...

CVE-2015-5267

CVE-2015-5267 affects Moodle up to versions 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2. The vulnerability stems from using PHP’s mt_rand in the Moodle functions random_string and complex_random_string , which makes password-recovery tokens predictable by brute force. ...

Fedora Update for moodle FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5267

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...

Kallithea 0.2.9 HTTP Response Splitting

Kallithea 0.2.9 camefrom HTTP Response Splitting Vulnerability Vendor: Kallithea Product web page: https://www.kallithea-scm.org Version affected: 0.2.9 and 0.2.2 Summary: Kallithea, a member project of Software Freedom Conservancy, is a GPLv3'd, Free Software source code management system that...

Kallithea 0.2.9 - came_from HTTP Response Splitting

Kallithea 0.2.9 - camefrom HTTP Response Splitting Kallithea 0.2.9 camefrom HTTP Response Splitting Vulnerability Vendor: Kallithea Product web page: https://www.kallithea-scm.org Version affected: 0.2.9 and 0.2.2 Summary: Kallithea, a member project of Software Freedom Conservancy, is a GPLv3'd,...