13135 matches found
bildiriozeti.com XSS vulnerability
Vulnerable URL: http://www.bildiriozeti.com/home/search.asp?send=Search=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=Ara=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...
adwa.at XSS vulnerability
Vulnerable URL: http://www.adwa.at/termine/1195/"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11253889 Google Pagerank| 3 VIP website status:| No Check adwa.at SSL...
CentOS 5 : nspr / nss (CESA-2015:1980)
Updated nss and nspr packages that fix three security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...
Oracle Linux 5 : nss / and / nspr (ELSA-2015-1980)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1980 advisory. - Resolves: Bug 1269359 - CVE-2015-7183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
Fedora Update for nss FEDORA-2015-5
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 : nss and nspr (RHSA-2015:1980)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1980 advisory. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...
Memory corruption
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than...
CVE-2015-8072
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073...
Design/Logic Flaw
Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service call-reception outage or mute manipulation, via a crafted application, aka internal bug...
CVE-2015-6608
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than...
CVE-2006-5701
Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem...
CVE-2006-6143
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service crash and possibl...
CVE-2006-6144
The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, allows remote attackers to cause a denial of service crash via unspecified vectors that cause mechglue to free...
CVE-2008-6560
Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service CPU consumption and memory corruption via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege...
CVE-2006-3742
The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times...
CVE-2007-1381
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
CVE-2007-1884
Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...
trueplookpanya.com XSS vulnerability
Vulnerable URL: http://www.trueplookpanya.com/examination/doexam/11947/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62140 Google Pagerank| 5 VIP website status:| No Check...
trueplookpanya.com XSS vulnerability
Vulnerable URL: http://www.trueplookpanya.com/new/search?q==1"=0=006577262035313064220%3Aerg4hmucokw=F ORID%3A10=UTF-8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62140 Google...
oeffnungszeitenbuch.de XSS vulnerability
Vulnerable URL: http://www.oeffnungszeitenbuch.de/suche/filiale-%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E-5+km-%2522%253E%253Csvg%252Fonload%253Dalert%2528%252FXSSPOSED%252F%2529%253E-1.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017...