Jetty 'CookieDump.java' Cross-Site Scripting Vulnerability

Jetty WebServer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-2211

CVE-2009-2211 describes a cross-site scripting (XSS) vulnerability in the CQWeb server of IBM Rational ClearQuest. Affected product versions are IBM Rational ClearQuest CQWeb 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5. The issue allows remote attackers to inject arbitrary web script or HTML vi...

Jetty Cross Site Scripting and Information Disclosure Vulnerabilities

Jetty is prone to a cross-site scripting vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2009-1292

CVE-2009-1292 affects IBM Rational ClearCase UCM-CQ on Linux/AIX (7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, 7.1.x before 7.1.0.1). The underlying issue is that a username and password are exposed on the command line, allowing local attackers to obtain credentials by listing processes. The a...

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus 7.0.0 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, a related issue to CVE-2008-1299. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1432

CVE-2008-1432 is an XSS vulnerability in ManageEngine SupportCenter Plus 7.0.0 (SolutionSearch.do) where the searchText parameter can inject script/HTML. Related entry CVE-2008-1299 covers ManageEngine ServiceDesk Plus 7.0.0 Build 7011 with the same vector. Connected documents confirm affected pr...

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

ASG-Sentry 7.0.0存在多个漏洞

BUGTRAQ ID: 28188 CNCAN ID:CNCAN-2008031104 ASG-Sentry是一款网关管理软件。 ASG-Sentry存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务和任意代码执行攻击。 - fcheck.exe CGI -b选项处理存在问题，可导致任意文件删除。 - FxAgent进程处理包含超长community字段的SNMP请求时存在堆溢出问题。 - FxIAList不正确验证"exit"命令，任何用户可执行此命令使服务退出。 - FxIAList拷贝数据到缓冲区时存在缓冲区溢出。 ASG-Sentry 7.0 目前没有解决方案提供：...

CVE-2005-2950

Cross-site scripting XSS vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request...

[Full-disclosure] Sawmill XSS vuln

This has been delayed until the vendor had released a new version: SNIP Date: Fri, 26 Aug 2005 11:48:48 -0700 From: Greg Ferrar [email protected] User-Agent: Mozilla Thunderbird 1.0.2 Macintosh/20050317 X-Accept-Language: en-us, en To: [email protected] Cc: [email protected]...

RHEL 3 / 4 : Adobe Acrobat Reader (RHSA-2005:575)

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...

Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...