2879 matches found
Default credentials
Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...
CVE-2010-4647
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...
CVE-2008-7271
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...
CVE-2008-7271
CVE-2008-7271 describes multiple cross-site scripting (XSS) vulnerabilities in the Eclipse IDE Help Contents web application (Help Server). An attacker could inject arbitrary script/HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add act...
CVE-2010-3925
Contents-Mall before version 15 contains a vulnerability in password handling that can allow remote attackers to disclose the administrative password and potentially access or modify stored data. The issue is addressed in Contents-Mall Ver.15.00; affected versions are Ver.14.00 and earlier. No ex...
CVE-2010-3925
Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...
CVE-2008-7271
Removed by vendor...
Contents-Mall vulnerability in password handling
Overview Contents-Mall contains a vulnerability in the way it handles passwords. Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information...
PT-2011-1615 · Eclipse +1 · Eclipse Ide +1
Name of the Vulnerable Software and Affected Versions: Eclipse IDE versions prior to 3.6.2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Help Contents web application of the Eclipse IDE. These vulnerabilities allow remote attackers to inject arbitrary we...
[SECURITY] Fedora 13 Update: evince-2.30.3-2.fc13
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
JVN#53293565: Contents-Mall vulnerability in password handling
Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information stored by the software may be viewed or altered. Solution Updatethe software Update...
Integer overflow
Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...
Clipboard contents alteration vulnerability in Grani
Overview Grani contains a vulnerability in which the contents of the clipboard may be altered. Grani, a web browser provided by Fenrir, contains a vulnerability in which the contents of the clipboard may be altered. As a result, when Grani is being used under certain settings, the contents of the...
Secunia Research: Winamp NSV Table of Contents Parsing Integer Overflow
====================================================================== Secunia Research 30/11/2010 - Winamp NSV Table of Contents Parsing Integer Overflow - ====================================================================== Table of Contents Affected...
Multiple Vulnerabilities in JAF CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in JAF CMS which could be exploited to compromise vulnerable system. 1 Remote code execution in JAF CMS The vulnerability exists due to insufficient sanitation of input data in module/log/vislog.php. A remote attack...
CVE-2010-2950
CVE-2010-2950 is a format-string vulnerability in the PHP phar extension (stream.c/phar_stream_flush) affecting PHP 5.3.x up to 5.3.3. It allows context-dependent attackers to disclose memory contents and potentially execute arbitrary code via a crafted phar:// URI. The issue is noted as stemming...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. Microsoft Help Files .CHM: 'Locked File' Bypass Versions Affected: Windows XP, Windows Vista, Windows 7 pdf: http://www.security-assessment.com/files/advisories/WindowsLockedHelpFiles.pdf...
KF Web Server 3.2.0 Remote Contents Change
Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1 http://127.0.0.1:9727/index.wkf?opmenu=2 Edit general...
KF Web Server v3.2.0 Remote Contents Change Vulnerability
No description provided by source. Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1...