Lucene search
+L

53 matches found

CVE
CVE
added 2013/10/10 10:0 a.m.60 views

CVE-2013-5523

CVE-2013-5523 concerns the Sponsor Portal of Cisco Identity Services Engine (ISE) 1.2 and earlier, where insufficient protection of IFRAME elements allows cross-frame scripting (XFS) and clickjacking via a user‑directed attacker page. The root cause is inadequate HTML iframe protection in the Spo...

4.3CVSS6.5AI score0.01216EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/02/11 12:0 a.m.28 views

MantisBT < 1.2.12 Multiple Vulnerabilities

According to its version number, the MantisBT install hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by an information disclosure vulnerability due to a flaw in using default values to determine if a user has sufficient privileges to modify...

5.5CVSS5.6AI score0.01883EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2012/11/26 12:0 a.m.40 views

Fedora 17 : mantis-1.2.12-1.fc17 (2012-18294)

New upstream release, fixes several security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

7.5CVSS5.3AI score0.03829EPSS
Exploits5References15
OpenVAS
OpenVAS
added 2012/11/26 12:0 a.m.34 views

Fedora Update for mantis FEDORA-2012-18294

Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2012-18294 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS6.3AI score0.03829EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2012/11/26 12:0 a.m.27 views

Fedora Update for mantis FEDORA-2012-18294

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.4AI score0.03829EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2012/11/26 12:0 a.m.35 views

Fedora 16 : mantis-1.2.12-1.fc16 (2012-18299)

New upstream release, fixes several security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

7.5CVSS5.3AI score0.03829EPSS
Exploits5References15
Tenable Nessus
Tenable Nessus
added 2012/11/26 12:0 a.m.35 views

Fedora 18 : mantis-1.2.12-1.fc18 (2012-18273)

New upstream release, fixes several security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

7.5CVSS5.3AI score0.03829EPSS
Exploits5References15
CVE
CVE
added 2012/11/16 12:0 a.m.66 views

CVE-2012-5523

CVE-2012-5523 affects MantisBT prior to 1.2.12. The issue is in the email_api.php component where email notification sending is not correctly handled for bugs with restricted visibility, enabling a remote authenticated user to gain access to sensitive information by adding a note before losing pe...

5.5CVSS5.6AI score0.01883EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2008/12/12 6:30 p.m.20 views

CVE-2008-5523

avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

9.3CVSS6.3AI score0.02902EPSS
Exploits0References4
CVE
CVE
added 2008/12/12 6:13 p.m.53 views

CVE-2008-5523

CVE-2008-5523 describes multiple antivirus products (e.g., Avast!, NVD-listed vendors, RISING, Sophos, Symantec, Sunbelt VIPRE, PrevX/Prevx1, PC Tools) failing to detect malware when an HTML document begins with an MZ header (EXE info) and a manipulated filename (no extension, .txt, or .jpg). The...

9.3CVSS6.2AI score0.02902EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2007/10/17 11:17 p.m.19 views

CVE-2007-5523

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS08...

7.5CVSS6.2AI score0.0187EPSS
Exploits0References8
CVE
CVE
added 2007/10/17 11:0 p.m.58 views

CVE-2007-5523

Technical details about CVE-2007-5523 are not publicly available in the provided documents. Monitor for updates.

7.5CVSS8.9AI score0.0187EPSS
Exploits0References8Affected Software2
CVE
CVE
added 2006/10/26 4:0 p.m.42 views

CVE-2006-5523

EZ-Ticket 0.0.1 is affected by a PHP remote file inclusion (RFI) vulnerability in common.php, allowing remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter. This CVE-2006-5523 issue yields a high impact (base score 7.5) with network access and no authentication....

7.5CVSS7.9AI score0.03044EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder