CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

CVE-2012-5566

Multiple cross-site scripting XSS vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used in Horde Groupware Webmail Edition before 4.0.8, allow remote attackers to inject arbitrary web script or HTML via the 1 tasks view or 2 search view...

CVE-2012-5565

CVE-2012-5565 is an XSS vulnerability in Horde IMP (js/compose-dimp.js) used with Horde Groupware Webmail Edition prior to 4.0.9. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted name for an attached file in the dynamic view, affecting Horde IMP befo...

CVE-2012-5566

Affected software: Horde Kronolith (H4) 3.0.x used in Horde Groupware Webmail Edition prior to 4.0.8. Vulnerability: multiple XSS flaws in the tasks view and search view, due to input handling in Kronolith before 3.0.17. Impact: remote attackers can inject arbitrary web script or HTML. Remediatio...

CVE-2012-6640

Cross-site scripting (XSS) in Horde Internet Mail Program (IMP) before 5.0.22, used with Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment. No remediation details are provided in the supplied documents.

CVE-2012-5567

CVE-2012-5567 affects Horde Kronolith (H4) before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9. The flaw is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via crafted event location parameters in the month, monthlist, or ...

CVE-2012-5565

Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

CVE-2012-6429

Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.1212327 allows remote attackers to execute arbitrary code via a long string to the password argument...

CVE-2012-6429

CVE-2012-6429 is a buffer overflow in the PrepareSync() method of the SyncService.dll ActiveX control in Samsung Kies prior to version 2.5.1.12123_2_7 . The vulnerability arises from insufficient input sanitisation, allowing a remote attacker to supply a crafted long value to the password paramet...

CVE-2012-4920

CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...

Important: Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.1 update

Red Hat JBoss BRMS 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

Important: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.1 update

Red Hat JBoss BPM Suite 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CentOS Update for libsmbclient CESA-2014:0330 centos6

Check for the Version of libsmbclient OpenVAS Vulnerability Test CentOS Update for libsmbclient CESA-2014:0330 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for moodle FEDORA-2014-4152

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2014-4152 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2014-4152

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for samba and samba3x RHSA-2014:0330-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for samba and samba3x RHSA-2014:0330-01

Check for the Version of samba and samba3x OpenVAS Vulnerability Test RedHat Update for samba and samba3x RHSA-2014:0330-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for samba3x CESA-2014:0330 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0032

CVE-2012-0032 affects Red Hat JBoss Operations Network (JON) prior to 3.0.1. The root directory is created with 0777 permissions when installing the remote client, enabling local users to read or modify subdirectories/files and potentially obtain JON credentials. This is a local-privilege-concern...