7582 matches found
Directory traversal
Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors...
XSS vulnerability in Atutor edit content folder
Vulnerability ID: HTB22599 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutoreditcontentfolder.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting...
ArtGK Cross Site Scripting
===================================== Vulnerability ID: HTB22588 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms1.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 201...
XSS vulnerability in TCMS
Vulnerability ID: HTB22574 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS Cross Site Scripting Status:...
XSRF (CSRF) in Webmatic
Vulnerability ID: HTB22570 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...
XSS vulnerability in Auto CMS
Vulnerability ID: HTB22564 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinautocms.html Product: Auto CMS Vendor: Roberto Aleman http://ventics.com/autocms/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS Cross Site...
XSS vulnerability in CompuCMS
Vulnerability ID: HTB22581 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincompucms1.html Product: CompuCMS Vendor: CompuSoft A/S http://www.compusoft.dk/ Vulnerable Version: Current at 06.08.2010 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS...
XSS vulnerability in i-Web Suite
Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerabilit...
XSS vulnerability in Eden Platform
Vulnerability ID: HTB22539 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinedenplatform1.html Product: Eden Platform Vendor: Preation http://www.preation.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: X...
XSS vulnerability in Amethyst
Vulnerability ID: HTB22501 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst1.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor Notification: 22 July 2010...
XSS vulnerability in DT Centrepiece
Vulnerability ID: HTB22520 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindtcentrepiece1.html Product: DT Centrepiece Vendor: DT Services http://www.dt.net.nz/ Vulnerable Version: 4.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross Site...
XSS vulnerability in BXR search
Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...
DiamondList v0.1.6 CSRF Vulnerability
Exploit for php platform in category web applications ===================================== DiamondList v0.1.6 CSRF Vulnerability ===================================== Vulnerability ID: HTB22517 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiamondlist.html Product: DiamondList Vendor:...
Open Blog 1.2.1 - Cross-Site Request Forgery
Vulnerability ID: HTB22496 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenblog.html Product: Open Blog Vendor: Tomaž Muraus http://www.open-blog.info/ Vulnerable Version: 1.2.1 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: CSRF Cross-Site Request...
Mandriva Update for php MDVSA-2010:139 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:139 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Mozilla Foundation Security Advisory 2010-42
Mozilla Foundation Security Advisory 2010-42 Title: Cross-origin data disclosure via Web Workers and importScripts Impact: High Announced: July 20, 2010 Reporter: Yosuke Hasegawa Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1 Thunderbird 3.0.6...
Firefox 3.6 < 3.6.7 Multiple Vulnerabilities
The installed version of Firefox 3.6.x is earlier than 3.6.7. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute...
Firefox < 3.5.11 Multiple Vulnerabilities
The installed version of Firefox is earlier than 3.5.11. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute cloning...
FreeBSD : mozilla -- multiple vulnerabilities (8c2ea875-9499-11df-8e32-000f20797ede)
The Mozilla Project reports : MFSA 2010-34 Miscellaneous memory safety hazards rv:1.9.2.7/ 1.9.1.11 MFSA 2010-35 DOM attribute cloning remote code execution vulnerability MFSA 2010-36 Use-after-free error in NodeIterator MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code...