949 matches found
CVE-2015-0888
Affected software : KENT-WEB Clip Board, prior to version 4.1. Vulnerability : remote attacker can delete arbitrary files via unspecified vectors. Impact : arbitrary file deletion on the server. Versions : 4.1 and earlier (Clip Board 4.02 and earlier per JVN/JVNDB entries). Remediation : apply an...
CVE-2015-0888: Undefined Security Weakness
KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors...
PT-2015-4944
Name of the Vulnerable Software and Affected Versions KENT-WEB Clip Board versions prior to 4.1 Description The issue allows remote attackers to delete arbitrary files via unspecified vectors. Recommendations For versions prior to 4.1, update to version 4.1 or later to resolve the issue...
KENT-WEB Clip Board vulnerability where arbitary files may be deleted
Overview Clip Board provided by KENT-WEB is a bulletin board software that allows users to upload binary files such as image files. KENT-WEB Clip Board contains a vulnerability that may allow a remote attacker to delete arbitrary files. Shoji Baba reported this vulnerability to IPA. JPCERT/CC...
JVN#62298871: KENT-WEB Clip Board vulnerability where arbitary files may be deleted
Clip Board provided by KENT-WEB is a bulletin board software that allows users to upload binary files such as image files. KENT-WEB Clip Board contains a vulnerability that may allow a remote attacker to delete arbitrary files. Impact A remote attacker may delete arbitrary files on the server...
CVE-2014-7258
Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-7258
Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-7258
CVE-2014-7258 is an XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier that can execute arbitrary script in the browser when viewed with certain Internet Explorer versions. JVN details indicate the issue affects Clip Board up to ver. 2.91 and can be exploited in IE 5.01–7 environments lack...
CVE-2014-7258: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-7863
Name of the Vulnerable Software and Affected Versions KENT-WEB Clip Board versions 2.91 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when running certain versions of Internet Explorer. Recommendatio...
KENT-WEB Clip Board vulnerable to cross-site scripting
Overview KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Sen UENO of Tricorder Co. Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...
JVN#12798709: KENT-WEB Clip Board vulnerable to cross-site scripting
KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...
CVE-2014-6692
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6692
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6692
The CVE-2014-6692 issue affects the Android app Kingsoft Clip (Office Tool) cn.wps.clip, version 1.5.1. The underlying flaw is that the app does not verify X.509 certificates from SSL servers, enabling a man‑in‑the‑middle attacker to spoof servers and potentially exfiltrate sensitive information ...
CVE-2014-6692: Undefined Security Weakness
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7370
Name of the Vulnerable Software and Affected Versions Kingsoft Clip Office Tool version 1.5.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...
clip bucket 2.6 - Multiple Vulnerabilities
No description provided by source. Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : No...