IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-08267)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

cisco wireless kit there is a serious vulnerability, so far no fix-bug warning-the black bar safety net

Cisco recently released a security Advisory to announce the three Cisco wireless packet is subjected to a severe bug effects,but there is still no solution available. SOHO equipment is mainly used in most of the goals between network components,and often in the wild, they often lack the protectiv...

openssh: possible fallback from untrusted to trusted X11 forwarding

An access flaw was discovered in OpenSSH; the OpenSSH client did not correctly handle failures to generate authentication cookies for untrusted X11 forwarding. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the local X server, eve...

Medium: openssh

Issue Overview: An access flaw was discovered in the OpenSSH client where it did not correctly handle failures to generate authentication cookies for untrusted X11 forwarding. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the loc...

RedHat Update for openssh RHSA-2016:0465-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSSH Authentication Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers maintained by the OpenBSD Project Group. The tools are an open source implementation of the SSH protocol and support encryption of all transmissions, effectively blocking eavesdropping, connection...

WordPress Plugin Google Analytics by Yoast HTML Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blogging sites on servers with PHP and MySQL.Google Analytics by Yoast is one of the web analytics plugins available. An HTML injection vulnerability exists i...

Microsoft SharePoint Foundation Cross-Site Scripting Vulnerability (CNVD-2015-05988)

Microsoft SharePoint Foundation is the United States Microsoft Microsoft company's set of Web-based collaboration platform for small organizations or departments. A cross-site scripting vulnerability exists in the Microsoft SharePoint Foundation 2013 SP1 version that can be exploited by a remote...

WP REST API (WP API) <= 1.2.2 - Cross-Site Scripting (XSS)

Requests from other origins could potentially run code on the API domain, allowing cross-origin access to authentication cookies or similar...

WordPress Erident Custom and Dashboard Plugin Cross-Site Scripting Vulnerabilities

WordPress is a blogging platform developed in PHP, which supports personal blog sites on PHP and MySQL servers.Erident Custom Login is a plugin to customize the login screen of the WordPress console.The WordPress Dashboard is the first page you see after logging in to the backend. The first page...

PHPKIT WCMS 'include.php' cross-site scripting vulnerability

PHPKIT WCMS is a web-based content management system CMS. The system provides modules such as forums and message boards. A cross-site scripting vulnerability exists in PHPKIT WCMS, which stems from the program failing to adequately filter user-submitted input. When a user browses the affected sit...

IBM WebSphere Portal 6.1.5.x < 6.1.5.3 CF27 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is 6.1.5.x prior to 6.1.5.3 CF27. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'bootconfig.jsp' script due to improper validation of user-supplied input. An attacker c...

IBM WebSphere Portal Unspecified XSS (PI16174)

The version of IBM WebSphere Portal on the remote host is affected by an unspecified cross-site scripting vulnerability due to improper user input validation. An attacker can exploit this issue to execute code in the security context of a user's browser to steal authentication cookies...

IBM WebSphere Portal Unspecified XSS (PI18845)

The version of IBM WebSphere Portal on the remote host is affected by an unspecified cross-site scripting vulnerability due to improper user input validation. An attacker can exploit this issue to execute code in the security context of a user's browser to steal authentication cookies...

IBM WebSphere Portal Unspecified XSS (PI16127)

The version of IBM WebSphere Portal on the remote host is affected by an unspecified cross-site scripting vulnerability due to improper user input validation. An attacker can exploit this issue to execute code in the security context of a user's browser to steal authentication cookies...

WordPress Releases Security Update

WordPress 3.8.2 has been released to address multiple vulnerabilities, one of which could allow an attacker to gain unauthorized access using forged authentication cookies. WordPress 3.7.1 users will be updated to 3.7.2, which contains the same security fixes as 3.8.2. Users operating older,...

PostNuke 0.6/0.7 web_links Module TTitle Cross-site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...

Dr. Web Control Center 6.00.3.201111300 XSS Vulnerability

No description provided by source. Dr. Web Control Center Admin UI Remote Script Code Injection ============================================================= Affected Products/Versions -------------------------- Product Name: Dr. Web Enterprise Server Version Number: 6.00.3.201111300...

PostNuke 0.6/0.7 Downloads Module TTitle Cross-site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...

CoMoblog 1.0 Img.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17201/info CoMoblog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...