Lucene search
+L

3386 matches found

zdt
zdt
added 2009/10/05 12:0 a.m.32 views

CGI Helper 1.0 xss

Exploit for unknown platform in category web applications ================== CGI Helper 1.0 xss ================== CGI Helper 1.00 Download: http://www.sourcecodeonline.com/details/cgihelper.html The script CGI Helper 1.00 is vulnerable to XSS. Example: www.site.com/cgi-bin/helper.cgi XSS:...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2009/09/09 11:48 p.m.8 views

Firefox 3.5.2 3.0.14 JavaScript engine crashes

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary...

10CVSS7.8AI score0.05269EPSS
SaveExploits0References4
Prion
Prion
added 2009/09/08 6:30 p.m.28 views

Cross site scripting

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

4.3CVSS5.8AI score0.03022EPSS
SaveExploits1References14Affected Software1
UbuntuCve
UbuntuCve
added 2009/09/08 6:30 p.m.31 views

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

4.3CVSS6AI score0.03022EPSS
SaveExploits1References1
OSV
OSV
added 2009/09/08 6:30 p.m.3 views

DEBIAN-CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

4.3CVSS4.3AI score0.03022EPSS
SaveExploits1References1
CVE
CVE
added 2009/09/08 6:0 p.m.124 views

CVE-2009-3009

Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, are affected by CVE-2009-3009 due to an input sanitization flaw in a form helper that can allow cross-site scripting via malformed Unicode strings. This is a known XSS vulnerability that could enable remote attackers to inject arbitrary scri...

4.3CVSS7.6AI score0.03022EPSS
SaveExploits1References14Affected Software1
Debian CVE
Debian CVE
added 2009/09/08 6:0 p.m.41 views

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

4.3CVSS4.6AI score0.03022EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2009/08/20 12:0 a.m.13 views

Slackware 12.2 : kernel [updated] (SSA:2009-231-01)

This is a followup to the SSA:2009-230-01 advisory noting some errata. The generic SMP kernel update for Slackware 12.2 was built using the .config for a huge kernel, not a generic one. The kernel previously published as kernel-generic-smp and in the gemsmp.s directory works and is secure, but is...

5.5AI score
SaveExploits0References1
Fedora
Fedora
added 2009/07/22 10:1 p.m.24 views

[SECURITY] Fedora 10 Update: wxGTK-2.8.10-2.fc10

wxWidgets/GTK2 is the GTK2 port of the C++ cross-platform wxWidgets GUI library, offering classes for all common GUI controls as well as a comprehensive set of helper classes for most common application tasks, ranging from networking to HTML display and image manipulation...

6.8CVSS0.5AI score0.02816EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/07/21 12:0 a.m.38 views

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

9.3CVSS7.5AI score0.15044EPSS
SaveExploits8References13
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.30 views

Fedora 10 : gpsdrive-2.09-7.fc10 (2009-1225)

This update removes several helper scripts: geo-code, geo-nearest, and gpssmswatch, which have been removed upstream due to security issues. This update also has a fix for an issue with the splash screen. Note that Tenable Network Security has extracted the preceding description block directly fr...

6.9CVSS5.4AI score0.0045EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2009/04/22 1:40 a.m.5 views

Firefox 3 JavaScript engine crashes

The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving 1 jsFindPropertyHelper, related to the definition...

5CVSS5.9AI score0.021EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.34 views

Mandriva Update for util-linux MDKSA-2007:198 (util-linux)

Check for the Version of util-linux OpenVAS Vulnerability Test Mandriva Update for util-linux MDKSA-2007:198 util-linux Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

6.9CVSS6.3AI score0.0044EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.30 views

Ubuntu Update for util-linux vulnerability USN-533-1

Ubuntu Update for Linux kernel vulnerabilities USN-533-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5331.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for util-linux vulnerability USN-533-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

6.9CVSS0.1AI score0.0044EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/03/20 12:0 a.m.48 views

RedHat Security Advisory RHSA-2009:0382

The remote host is missing updates announced in advisory RHSA-2009:0382. libvirt is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. libvirt also provides tools for remotely managing virtualized systems. The libvirtd daemon was...

7.2CVSS0.2AI score0.01172EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2009/02/16 12:0 a.m.13 views

Fedora Update for cobbler FEDORA-2008-10000

Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-10000 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

0.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/02/10 12:0 a.m.21 views

Fedora Core 10 FEDORA-2009-1225 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1225. OpenVAS Vulnerability Test $Id: fcore20091225.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1225 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

6.9CVSS0.4AI score0.0045EPSS
SaveExploits1References3
NVD
NVD
added 2008/11/18 4:0 p.m.13 views

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.9CVSS6.3AI score0.00339EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2008/11/18 3:0 p.m.21 views

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

6.3AI score0.00339EPSS
SaveExploits0References2
NVD
NVD
added 2008/09/29 5:17 p.m.16 views

CVE-2008-4299

A certain ActiveX control in the Microsoft Internet Authentication Service IAS Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service browser crash via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an...

5CVSS6.6AI score0.15858EPSS
SaveExploits0References3
Rows per page
Query Builder