CVE-2013-5646

Roundcube webmail 1.0-git is affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML through the Name field of an addressbook group. The linked sources consistently describe XSS in this component/version, but do not prov...

CVE-2013-5646

Cross-site scripting XSS vulnerability in Roundcube webmail 1.0-git allows remote authenticated users to inject arbitrary web script or HTML via the Name field of an addressbook group...

CVE-2013-5646

Cross-site scripting XSS vulnerability in Roundcube webmail 1.0-git allows remote authenticated users to inject arbitrary web script or HTML via the Name field of an addressbook group...

CVE-2012-5646

CVE-2012-5646 affects Red Hat OpenShift Origin, specifically node-util/restorer.php (path: restorer.php) in the OpenShift Origin package, prior to version 1.0.5-3. A crafted uuid in the PATH_INFO enables remote attackers to execute arbitrary commands with the privileges of the application. The is...

Moderate: Red Hat Security Advisory: openshift-origin-node-util security update

An updated openshift-origin-node-util package that fixes two security issues is now available for Red Hat OpenShift Enterprise 1.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

CVE-2008-5646

Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."...

CVE-2008-5646

CVE-2008-5646 affects Trac prior to 0.11.2. The vulnerability is described as an unspecified DoS via certain wiki markup; the exact root cause, affected subcomponents, exploit vectors, and mitigations are not detailed in the provided documents. No in‑the‑wild exploit status or patch details are g...

CVE-2007-5646

SMF SQL injection (CVE-2007-5646) affects Simple Machines Forum (SMF) 1.1.3. The flaw is in Sources/Search.php where the vulnerable userspec parameter used in the search2 action to index.php is not sanitized, enabling arbitrary SQL execution when using MySQL 5.x. An unauthenticated or authenticat...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Sophos Antivirus CHM File Heap Overflow Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available on the vendors...

CVE-2006-5646

CVE-2006-5646 is a heap-based buffer overflow in Sophos products when archive scanning is enabled. A CHM file with an LZX decompression header that specifies Window_size = 0 can cause memory corruption leading to a denial of service. Affected are Sophos Anti-Virus and Endpoint Security before 6.0...