CVE-2013-1223

The log viewer in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted 1 HTTP or 2 HTTPS request, aka Bug ID CSCub38372...

PT-2013-2986

Name of the Vulnerable Software and Affected Versions Cisco Unified Customer Voice Portal CVP Software versions prior to 9.0.1 ES 11 Description The issue is related to the log viewer in the software, which does not properly validate an unspecified parameter. This allows remote attackers to read...

CVE-2013-1223: Improper Input Validation

The log viewer in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted 1 HTTP or 2 HTTPS request, aka Bug ID CSCub38372...

Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]

Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...

DEBIAN-CVE-2012-2094

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

PYSEC-2012-32

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

PYSEC-2012-32

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

CVE-2012-2094

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

CVE-2012-2094

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

CVE-2012-2094

Cross-site scripting XSS vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard Horizon folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console...

CVE-2012-2094

CVE-2012-2094 is an OpenStack Horizon XSS vulnerability in the refresh mechanism of the log viewer (horizon/static/horizon/js/horizon.js) affecting folsom-1 and 2012.1 and earlier. The underlying issue allows remote attackers to inject arbitrary script or HTML via the guest console. Documents pro...

PT-2012-3803

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions folsom-1 and 2012.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability in the refresh mechanism of the log viewer. This vulnerability allows remote attackers to inject...

PT-2012-6308

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions folsom-1 and 2012.1 and earlier Description A cross-site scripting XSS issue exists in the log viewer's refresh mechanism, allowing remote attackers to inject arbitrary web script or HTML via the guest...

Fedora 17 : python-django-horizon-2012.1-2.fc17 (2012-6108)

Update to Essex final Fix a XSS vulnerability in Horizon log viewer Update to final essex release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 15 Update: kdeadmin-4.6.2-2.fc15

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...

Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting

An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure dotDefender is a Web Application Firewall that can be installed on Window...

Applicure dotDefender 4.0 administrative interface cross site scripting

Applicure dotDefender 4.0 administrative interface cross site scripting An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure...

[SECURITY] Fedora 11 Update: kdeadmin-4.4.3-1.fc11.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

[SECURITY] Fedora 13 Update: kdeadmin-4.4.3-1.fc13.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

[SECURITY] Fedora 12 Update: kdeadmin-4.4.3-1.fc12.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...