Lucene search
+L

28 matches found

Debian
Debian
added 2016/01/30 6:48 p.m.97 views

[SECURITY] [DSA 3462-1] radicale security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3462-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 30, 2016 https://www.debian.org/security/faq -...

10CVSS8.5AI score0.02945EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/01/30 12:0 a.m.26 views

Debian Security Advisory DSA 3462-1 (radicale - security update)

Two vulnerabilities were fixed in radicale, a CardDAV/CalDAV server. CVE-2015-8747 The not configured by default and not available on Wheezy multifilesystem storage backend allows read and write access to arbitrary files still subject to the DAC permissions of the user the radicale server is...

7.5CVSS0.02945EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/01/29 12:0 a.m.19 views

Debian: Security Advisory (DSA-3462-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.02945EPSS
Exploits0References3
Debian
Debian
added 2016/01/26 9:37 p.m.69 views

[SECURITY] [DLA 403-1] radicale security update

Package : radicale Version : 0.3-2+deb6u1 CVE ID : CVE-2015-8747 CVE-2015-8748 Debian Bug : 809920 Several issues have been discovered by Unrud in Radicale, a calendar and addressbook server. A remote attacker could exploit these vulnerabilities and call arbitrary functions by sending crafted HTT...

10CVSS8.2AI score0.02945EPSS
Exploits0
CVE
CVE
added 2014/10/13 6:0 p.m.48 views

CVE-2014-8748

CVE-2014-8748 is a Drupal DFP (Doubleclick for Publishers) module XSS vulnerability in the 7.x-1.x line, where unsanitized slot names output to HTML allows remote authenticated users with the administer dfp permission to inject arbitrary script or HTML. The affected versions are DFP 7.x-1.x prior...

3.5CVSS5.4AI score0.00946EPSS
Exploits0References4Affected Software1
Drupal
Drupal
added 2014/01/22 12:0 a.m.21 views

SA-CONTRIB-2014-003 - Doubleclick for Publishers DFP - Cross Site Scripting (XSS)

This module enables you to create blocks to place advertisements from the Google Double Click for Publishers API DFP. The module doesn't sufficiently sanitize the slot names prior to output into HTML. This vulnerability is mitigated by the fact that an attacker must have a role with the permissio...

3.5CVSS6.3AI score0.00946EPSS
Exploits0References10
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.14 views

CVE-2020-8748

...

Exploits0
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:0 a.m.2 views

MS:47CD9DE4-D3F0-40F9-8748-36A859F623AB

...

7AI score
Exploits0
Rows per page
Query Builder