669 matches found
TYPO3 Multiple Cross-Site Scripting Vulnerabilities (Jan 2016)
TYPO3 is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...
PT-2015-5728
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description The cache handler in MyBB does not properly check the encoding of input to the var export function, allowing attackers to have an unspecified impact via unknown vectors. Recommendations For versions pri...
CVE-2013-5855
Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a 1 tag or 2 EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting XSS attacks via application-specific vectors...
PT-2014-4125
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Description The issue allows remote attackers to spoof the address bar via a crafted web site, due to improper encoding of domain names in URLs...
CVE-2013-4547: Improper Encoding or Escaping of Output
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI...
Improper Handling of Alternate Encoding
Overview Affected versions of this package are vulnerable to Improper Handling of Alternate Encoding via boost::locale::utf::utftraits in the /boost/locale/utf.hpp, which does not properly detect certain invalid UTF-8 sequences. A remote attacker can bypass input validation protection mechanisms...
RHEL 4 : glibc (RHSA-2012:0125)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0125 advisory. - glibc: tzfileread integer overflow to buffer overflow CVE-2009-5029 - glibc: ldd unexpected code execution issue CVE-2009-5064 - glibc:...
