6227 matches found
CVE-2009-1738
Cross-site scripting XSS vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items."...
CVE-2009-1738
The CVE-2009-1738 entry concerns a Drupal module vulnerability in Feed Block 6.x-1.x prior to 6.x-1.1. The issue is a Cross-Site Scripting (XSS) vulnerability that allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors ...
CVE-2009-1738
Cross-site scripting XSS vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items."...
CVE-2009-1738
Cross-site scripting XSS vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items."...
CVE-2009-1738: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items."...
CVE-2009-0162
Cross-site scripting XSS vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL...
CVE-2009-0162
Cross-site scripting XSS vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL...
CVE-2009-0162: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL...
SA-CONTRIB-2009-028 - Feed Block - Cross Site Scripting
The Feed Block module creates a block with one externalsyndicated article for each feed source from selected feed category. Feed block doesn't properly escapes aggregator items allowing users with administer news feeds permission to inject arbitrary code into the site. Such a cross site scripting...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...
CVE-2009-1467
Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...
[SECURITY] Fedora 10 Update: blam-1.8.5-10.fc10
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 9 Update: blam-1.8.5-9.fc9.1
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 10 Update: blam-1.8.5-9.fc10
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
CVE-2009-1249
Cross-site scripting XSS vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map...
CVE-2009-1249
CVE-2009-1249: XSS in Drupal’s Feed element mapper 5.x before 5.x-1.1. The vulnerability affects the Feed element mapper module for Drupal, allowing remote attackers to inject arbitrary script/HTML via the content title at admin/content/node-type/nodetype/map. Root cause is insufficient validatio...
CVE-2009-1249
Cross-site scripting XSS vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map...
CVE-2009-1249: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map...
Cross site scripting
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...