CVE-2010-1193

CVE-2010-1193 is a Cross-site Scripting (XSS) vulnerability in VMware WebAccess for VMware Server 2.0. The issue arises from improper handling of JSON error messages, enabling an attacker to inject arbitrary script/HTML when a user is enticed to click a crafted link. The vulnerability is part of ...

CVE-2010-1193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages...

Cross site scripting

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

CVE-2010-1104

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

CVE-2010-1104: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

PT-2010-2820

Name of the Vulnerable Software and Affected Versions Zope versions 2.8.x through 2.8.11 Zope versions 2.9.x through 2.9.11 Zope versions 2.10.x through 2.10.10 Zope versions 2.11.x through 2.11.5 Zope versions 2.12.x through 2.12.2 Description The issue allows remote attackers to inject arbitrar...

Mandriva Update for drakxtools MDVA-2010:082 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:082 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Web Application SQL Backend Identification

At least one web application hosted on the remote web server is built on a SQL backend that Nessus was able to identify by looking at error messages. Leaking this kind of information may help an attacker fine-tune attacks against the application and its backend. %NASLMINLEVEL 70300 C Tenable...

QuickEStore 7.9 SQL Injection

======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Hom...

QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability

No description provided by source. ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 -...

FreeBSD : opera -- multiple vulnerabilities (6431c4db-deb4-11de-9078-0030843d3802)

Opera Team reports : - Fixed a heap buffer overflow in string to number conversion - Fixed an issue where error messages could leak onto unrelated sites - Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...

opera -- multiple vulnerabilities

Opera Team reports: Fixed a heap buffer overflow in string to number conversion Fixed an issue where error messages could leak onto unrelated sites Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...

Error messages can leak onto unrelated sites

Scripting error messages are normally available only to the page that caused the error. In some cases, the error messages could be passed to other sites as the contents of unrelated variables, and may contain sensitive information. If those sites write the content into the page markup, this could...

Error messages can leak onto unrelated sites – Opera Security Advisories

Scripting error messages are normally available only to the page that caused the error. In some cases, the error messages could be passed to other sites as the contents of unrelated variables, and may contain sensitive information. If those sites write the content into the page markup, this could...

Cross site scripting

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3029: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Symantec SecurityExpressions Audit and Compliance Server is installed on the remote host. The installed version is affected by multiple cross-site scripting vulnerabilities. - The web console fails to sanitize user-supplied input to certain unspecified parameters. An authorized user may be able t...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Binary data 5206.prm...

Mandrake Security Advisory MDVSA-2009:197-2 (nss)

The remote host is missing an update to nss announced via advisory MDVSA-2009:197-2. OpenVAS Vulnerability Test $Id: mdksa20091972.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:197-2 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...