109 matches found
CVE-2012-5552
Summary: The Password policy module for Drupal 6.x and 7.x contains a vulnerability where, when the module’s “previous passwords” feature is enabled, an attacker who can view HTTP traffic can obtain a user’s hashed password due to lack of encrypted transport. This affects: Drupal 6.x-1.x prior to...
SA-CONTRIB-2012-159 - Password policy - Information leakage of hashed passwords
This module provides a way to specify a certain level of password complexity aka. "password hardening" for user passwords on a system by defining a password policy. The Password policy module allows administrators to request users to enter a new password that does not match any of the previous X...
Fedora Core 9 FEDORA-2009-5552 (pidgin)
The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. OpenVAS Vulnerability Test $Id: fcore20095552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5552 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities
Internet Explorer is prone to anti-xss filter vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-5552
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has...
CVE-2008-5552
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has...
CVE-2008-5552
The provided documents identify CVE-2008-5552 as a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where the XSS Filter can be bypassed, enabling remote XSS attacks. The issue arises from a CRLF sequence combined with a crafted Content-Type header, demonstrated with a utf-7 charset value....
CVE-2007-5552
CVE-2007-5552 describes an integer overflow in Cisco IOS that could allow remote execution of arbitrary code. Connected sources consistently name Cisco IOS as affected and identify the vulnerability as an integer overflow with remote-code-execution impact, but the disclosure vectors are described...