CVE-2012-2580

Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...

PT-2014-2249

Name of the Vulnerable Software and Affected Versions WP SimpleMail plugin version 1.0.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via the To, From, Date, or Subject field of an email, potentially leading to cross-site scripting XSS attacks...

PT-2014-2250

Name of the Vulnerable Software and Affected Versions Postie plugin versions 1.4.3 through 1.5.15 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the From field of an email...

CVE-2012-2579: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 To, 2 From, 3 Date, or 4 Subject field of an email...

CVE-2012-2580: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email...

CVE-2012-2591: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...

PT-2014-2253

Name of the Vulnerable Software and Affected Versions EmailArchitect Email Server versions 10.0 through 10.0.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the From or Date field in an email, potentially leading to cross-site scripting XSS attacks...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424...

UBUNTU-CVE-2014-1743

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted...

PT-2014-5475

Name of the Vulnerable Software and Affected Versions Zenoss version 4.2.5 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via a URL in the came from parameter in the /zport/acl users/cookieAuthHelper/login form...

UBUNTU-CVE-2014-2669

Multiple integer overflows in contrib/hstore/hstoreio.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the 1 hstorerecv, 2 hstorefromarrays, and 3 hstorefromarray...

CVE-2013-3249: Out-of-bounds Write

Stack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool DWExporter.exe in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors...

PT-2014-2663

Name of the Vulnerable Software and Affected Versions DameWare Remote Support versions 10.0.0.372, 9.0.1.247, and earlier Description The issue is related to a stack-based buffer overflow in the "Add from text file" feature of the DameWare Exporter tool. This allows attackers to execute arbitrary...

CVE-2013-7032

Multiple cross-site scripting XSS vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 name of an uploaded file or 2 customer name in a resource created from an uploaded file, a different vulnerability...

Cisco ASA VPN Denial of Service (CSCua91108)

A vulnerability in the VPN authentication code that handles parsing of the username from the certificate on the Cisco ASA firewall could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to parallel processing of a large number of Interne...

PT-2014-1883

Name of the Vulnerable Software and Affected Versions libsrtp versions prior to 1.4.4 p20121108-r1 libsrtp version 1.4.5 and earlier Description The issue is related to a buffer overflow in the srtp.c file of the libsrtp package, which can be exploited remotely to cause a denial of service crash...

CFME: GET request CSRF vulnerability

CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protectfromforgery mechanism and conduct cross-site request forgery CSRF attacks via a destructive action in a request...

UBUNTU-CVE-2013-6638

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the 1...

PT-2017-8790

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted string to the icalparser parse string function, which is processed by...

DEBIAN-CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...