3960 matches found
Zen Help Desk 2.1 - Authentication Bypass
--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...
Hardcoded credentials
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0942
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
Design/Logic Flaw
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0943
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0942
CVE-2009-0942 affects Apple Mac OS X 10.4.11 and 10.5 prior to 10.5.7 where Help Viewer loads CSS references from URLs without verifying they reside in a registered help book. This can allow a remote attacker to craft a malicious help: URL that triggers AppleScript execution and arbitrary code ex...
CVE-2009-0943
CVE-2009-0943 affects Apple Mac OS X Help Viewer: on Mac OS X 10.4.11 and 10.5 up to 10.5.6, full HTML paths loaded from help: URLs are not validated against registered help books, enabling a malicious help: URL to invoke arbitrary AppleScript and execute code. The issue is addressed in Security ...
CVE-2009-0942
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0943
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0943: Improper Input Validation
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
CVE-2009-0942: Improper Input Validation
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...
Mac OS X Multiple Vulnerabilities (Security Update 2009-002)
The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...
CVE-2009-1332
The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...
CVE-2009-1332: Undefined Security Weakness
The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...
CVE-2009-1261
Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...
CVE-2009-1261
The CVE-2009-1261 entry describes multiple cross-site scripting (XSS) flaws in Web Help Desk 9.1.22 (evaluation version). The vulnerabilities allow remote attackers to inject arbitrary script/HTML via three input fields in a Models action: Report Name, Asset No., and Full Name. The linked records...
CVE-2009-1261: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...
