3833 matches found
Eclipse 3.6.1 - Help Server helpindex.jsp Cross-Site Scripting
Eclipse 3.6.1 - Help Server helpindex.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/44883/info Eclipse IDE Help component is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues...
Eclipse IDE Cross Site Scripting
========================================================= Eclipse IDE | Help Server Local Cross Site Scripting XSS Vulnerability ========================================================= 1. OVERVIEW The Help Content web application of Eclipse IDE was vulnerable to Cross Site Scripting XSS...
Eclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44883/info Eclipse IDE Help component is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
MDVA-2009:222 : eclipse
A missing xulrunner path in the eclipse.ini configuration file is preventing the Eclipse to start resulting in a crash. This update provides the fix for that bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...
Fedora 11 : Miro-2.5.4-2.fc11 / blam-1.8.5-18.fc11 / chmsee-1.0.1-15.fc11 / eclipse-3.4.2-20.fc11 / etc (2010-1936)
Update to new upstream Firefox version 3.5.8, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.8 Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora Update for eclipse FEDORA-2010-1936
Check for the Version of eclipse OpenVAS Vulnerability Test Fedora Update for eclipse FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for eclipse FEDORA-2010-1936
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 11 Update: eclipse-3.4.2-20.fc11
The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...
CVE-2009-4521
CVE-2009-4521 : Eclipse BIRT’s birt-viewer/run is vulnerable to cross-site scripting due to improper validation of user input via the __report parameter in BIRT versions before 2.5.0 (KonaKart and other products use BIRT). An attacker could inject arbitrary script/HTML that executes in the victim...
WebSphere 7.0.0.7 Eclipse帮助导致XSS漏洞
No description provided by source...
MDVA-2009:032-1 : eclipse
This update addresses minor issues with eclipse. eclipse can not be installed after firefox3 installation 48095 Update: Packages for 2008.0 are being provided due to extended support for Corporate products. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...
[SECURITY] Fedora 11 Update: eclipse-3.4.2-17.fc11
The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor...
jetty 6.x < 7.x - Cross-Site Scripting / Information Disclosure / Injection
Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...
jetty 6.x - 7.x xss, information disclosure, injection
Exploit for jsp platform in category web applications ====================================================== jetty 6.x - 7.x xss, information disclosure, injection ====================================================== Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in...
Mort Bay / Eclipse Jetty Detection (HTTP)
HTTP based detection of Mort Bay / Eclipse Jetty. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Eclipse BIRT 2.2.1 Cross Site Scripting
Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,/;q=0.5 Accept-Language: en-us,en;q=0.5...
Eclipse BIRT <= 2.2.1 xss
Exploit for unknown platform in category web applications ========================= Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept:...
Eclipse BIRT <= 2.2.1 xss
No description provided by source. Eclipse BIRT = 2.2.1 Reflected XSS Vendor: Eclipse Advisory: http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss/ Author: Michele "euronymous" Orr euronymous AT antisnatchor DOT com Quite a common problem in a lot of Java based applications: reflected...
Eclipse BIRT 2.2.1 - run?__report Cross-Site Scripting
Eclipse BIRT 2.2.1 - run?report Cross-Site Scripting source: https://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage thi...