Roundcube Webmail < 0.8.1 XSS Vulnerability

Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

FreeBSD : RDoc -- multiple jQuery vulnerabilities (ed8d5535-ca78-11e9-980b-999ff59c22ea)

Ruby news : There are multiple vulnerabilities about Cross-Site Scripting XSS in jQuery shipped with RDoc which bundled in Ruby. All Ruby users are recommended to update Ruby to the latest release which includes the fixed version of RDoc. The following vulnerabilities have been reported...

CVE-2012-6719

creationtimestamp| type| source ---|---|--- 2019-08-28 16:32:14+00:00| seen| https://t.me/cibsecurity/6405...

CVE-2012-6719

CVE-2012-6719 affects the WordPress “Sharebar” plugin prior to version 1.2.2. The vulnerability is a SQL injection in the plugin’s handling of input, enabling an attacker to execute arbitrary SQL commands against the WordPress database. The CVE is documented with a high/severe impact profile (CVS...

CVE-2012-6718

CVE-2012-6718 affects the WordPress Sharebar plugin prior to version 1.2.2. The provided connected documents identify an cross-site scripting (XSS) vulnerability in that plugin, consistent across multiple sources, with variants described as XSS rather than the CSRF issues of CVE-2013-3491. The ro...

CVE-2012-6717

CVE-2012-6717 affects the WordPress Redirection plugin prior to version 2.2.12. The vulnerability is a Cross-Site Scripting (XSS) issue in the plugin, enabling an attacker to inject malicious script via the plugin’s input handling. Scope: WordPress redirection plugin; vulnerable versions include

RDoc -- multiple jQuery vulnerabilities

Ruby news: There are multiple vulnerabilities about Cross-Site Scripting XSS in jQuery shipped with RDoc which bundled in Ruby. All Ruby users are recommended to update Ruby to the latest release which includes the fixed version of RDoc. The following vulnerabilities have been reported...

Security feature bypass

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

CVE-2012-6716

The CVE-2012-6716 entry relates to the WordPress Events Manager plugin prior to 5.1.7, which has a cross-site scripting (XSS) vulnerability via JSON call links. Connected sources confirm the affected software and version (pre-5.1.7) and describe the payload as client-side script injection through...

CVE-2012-6714

The CVE-2012-6714 entry concerns the WordPress plugin Count Per Day, specifically versions before 3.2.3. The vulnerability is a cross-site scripting (XSS) flaw exposed via search words handled by the plugin, enabling injection of client-side script when a user interacts with the search feature. S...

Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...

Security Bulletin: Information disclosure in Apache Commons HttpClient may affect WebSphere Application Server as part of IBM InfoSphere Identity Insight (CVE-2012-5783)

Summary There is a potential information disclosure in Apache Commons HttpClient used by WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight. Vulnerability Details CVEs: CVE-2012-5783 Link to security bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016216...

CVE-2012-6713

creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:18+00:00| seen| https://t.me/cibsecurity/6105...

CVE-2012-6713

The CVE-2012-6713 entry concerns the WordPress Job Manager plugin, specifically versions before 0.7.19, which has multiple XSS issues. The vulnerability arises in the plugin’s handling of input to allow execution of client-side scripts, potentially impacting site visitors. Several connected sourc...

NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0152)

The remote NewStart CGSL host, running version MAIN 4.05, has kernel packages installed that are affected by multiple vulnerabilities: - It was found that AIO interface didn't use the proper rwverifyarea helper function with extended functionality, for example, mandatory locking on the file. Also...

UBUNTU-CVE-2012-6712

In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption...

CVE-2012-6712

The CVE-2012-6712 issue affects the Linux kernel prior to 3.4, where a buffer overflow in the Intel Wireless iwlwifi driver (iwl-agn-sta.c) can cause memory corruption. Exploitation details are not provided in the documents, but the vulnerability is documented across multiple feeds with reference...

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

CVE-2012-6711

creationtimestamp| type| source ---|---|--- 2019-06-18 22:33:25+00:00| seen| https://t.me/cibsecurity/4993...

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...