SuSE 10 Security Update : flash-player (ZYPP Patch Number 6844)

The following bug has been fixed: Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests CVE-2010-0186. The update also fixes a denial of service condition. CVE-2010-0187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...

CVE-2008-6844

CVE-2008-6844 affects eZ Publish vulnerable in the registration view (/user/register) prior to versions 3.9.5, 3.10.1, and 4.0.1. The underlying issue permits remote attackers to gain privileges as other users by manipulating ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_...

CVE-2008-6844

creationtimestamp| type| source ---|---|--- 2008-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7406...

CVE-2006-6844

CVE-2006-6844 : XSS vulnerability in the optional user comment module of CMS Made Simple 1.0.2. An attacker can inject arbitrary JavaScript/HTML via the user comment form, potentially affecting other users who view the comments. Metrics indicate a medium severity (CVSSv2 base score 6.8) with netw...