Lucene search
+L

1834 matches found

zdt
zdt
•added 2009/11/16 12:00 a.m.•30 views

Simplog v0.9.3.2 Mutliple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Simplog v0.9.3.2 Mutliple Vulnerabilities ========================================= Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•56 views

Simplog 0.9.3.2 - Multiple Vulnerabilities

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

6.8CVSS5.8AI score0.06354EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2009/09/23 12:00 a.m.•45 views

Google Chrome RSS Or Atom Feed Cross-Site Scripting Vulnerability

This host is installed with Google Chrome and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromerssnatomxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome RSS Or Atom Feed Cross-Site Scripting Vulnerability Authors: Sharath S Copyright:...

4.3CVSS6AI score0.01391EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2009/09/23 12:00 a.m.•41 views

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Windows)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09win.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...

4.3CVSS6.2AI score0.0268EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/09/23 12:00 a.m.•42 views

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Linux)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright:...

4.3CVSS6.5AI score0.0268EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/09/23 12:00 a.m.•41 views

Opera Multiple Cross-Site Scripting Vulnerabilities (Sep 2009) - Windows

Opera is prone to multiple Cross-Site Scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.1AI score0.0268EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2009/09/23 12:00 a.m.•37 views

Google Chrome RSS Or Atom Feed Cross-Site Scripting Vulnerability

Google Chrome is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.3AI score0.01391EPSS
SaveExploits1References5
Prion
Prion
•added 2009/09/18 10:30 p.m.•29 views

Cross site scripting

Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...

4.3CVSS6.1AI score0.01683EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2009/09/18 10:30 p.m.•37 views

CVE-2009-3263

Cross-site scripting XSS vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."...

4.3CVSS5.3AI score0.01391EPSS
SaveExploits1References6
NVD
NVD
•added 2009/09/18 10:30 p.m.•38 views

CVE-2009-3266

Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...

4.3CVSS5.5AI score0.0268EPSS
SaveExploits1References15
Prion
Prion
•added 2009/09/18 10:30 p.m.•36 views

Cross site scripting

Cross-site scripting XSS vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."...

4.3CVSS5.8AI score0.01391EPSS
SaveExploits1References6Affected Software1
CVE
CVE
•added 2009/09/18 10:00 p.m.•125 views

CVE-2009-3266

Opera before 10.01 is vulnerable to cross-site scripting via crafted RSS/Atom feeds due to improper HTML restriction when processing application/rss+xml as scripted content. This can enable remote XSS and cross-zone scripting on the Feed Subscription Page to read feeds or create subscriptions. Af...

4.3CVSS5.4AI score0.0268EPSS
SaveExploits1References15Affected Software1
Cvelist
Cvelist
•added 2009/09/18 10:00 p.m.•54 views

CVE-2009-3265

Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...

5.5AI score0.01683EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2009/09/18 10:00 p.m.•53 views

CVE-2009-3263

Cross-site scripting XSS vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."...

5.3AI score0.01391EPSS
SaveExploits1References6
CVE
CVE
•added 2009/09/18 10:00 p.m.•79 views

CVE-2009-3265

Opera 9.x/10.x is affected by CVE-2009-3265, a Cross-site scripting (XSS) flaw where rendering of RSS/Atom feeds as scripted content enables injection of arbitrary script/HTML. The underlying issue is the handling of application/rss+xml as scripted content. The vendor reportedly viewed this as a ...

4.3CVSS5.4AI score0.01683EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2009/09/18 10:00 p.m.•59 views

CVE-2009-3263

Removed by vendor...

4.3CVSS6.8AI score0.01391EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/18 12:00 a.m.•12 views

CVE-2009-3263: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."...

4.3CVSS6.1AI score0.01391EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/18 12:00 a.m.•5 views

CVE-2009-3266: Improper Neutralization of Input During Web Page Generation

Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...

4.3CVSS5.8AI score0.0268EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/18 12:00 a.m.•8 views

CVE-2009-3265: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...

4.3CVSS6.1AI score0.01683EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2009/09/16 12:00 a.m.•38 views

Chrome/Opera ATOM/RSS Reader Script Execution

Exploiting Chrome and Opera’s inbuilt ATOM/RSS reader with Script Execution and more ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomr...

0.1AI score
SaveExploits0
Rows per page
Query Builder