CVE-2012-3164

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Publish Item...

PT-2012-4531

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Publish Item in the...

PT-2012-2163

Name of the Vulnerable Software and Affected Versions e107 version 7 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the item id parameter in the jbShop plugin. Recommendations For version 7, update the jbShop plugin to a version that...

CVE-2012-1582

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

CVE-2012-1582

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

CVE-2012-1582

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

PT-2012-3356

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.17.x through 1.17.2 MediaWiki versions 1.18.x through 1.18.1 Description A cross-site scripting XSS issue exists in the wikitext parser, allowing remote attackers to inject arbitrary web script or HTML via a crafted page...

CVE-2012-1582: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

PT-2012-4414

Name of the Vulnerable Software and Affected Versions Websense Content Gateway versions prior to 7.7.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the menu or item paramet...

CVE-2012-2984: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in monitor/moverview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 item parameter...

PT-2012-5001

Name of the Vulnerable Software and Affected Versions Simple Web Content Management System version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints, including "item delete.php", "item status.php...

Race condition

Race condition in the scangetnextrmapitem function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging KSM is enabled, allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted application...

CVE-2012-0441

The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services NSS before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a...

DEBIAN-CVE-2012-0441

The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services NSS before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a...

Design/Logic Flaw

The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services NSS before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a...

PT-2012-2563

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.13.4 Firefox versions 4.x through 12.0 Firefox ESR versions 10.x prior to 10.0.5 Thunderbird versions 5.0 through 12.0 Thunderbird ESR versions 10.x prior to 10.0.5 SeaMonkey versions...

CVE-2012-0441: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services NSS before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a...

CVE-2010-5042

Cross-site scripting XSS vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party...

Novell GroupWise WebAccess Directory.Item Parameters XSS

The version of Novell GroupWise installed on the remote Windows host is earlier than 8.0.2 HP3. It is, therefore, reportedly affected by a cross-site scripting vulnerability because the application fails to sanitize user-supplied input to the 'Directory.Item.name' and 'Directory.Item.displayName'...

PT-2011-1800

Name of the Vulnerable Software and Affected Versions Joomla! component com jeguestbook version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the d itemid parameter in an item detail action to index.php. Recommendations For...