CVE-2014-1648

Cross-site scripting XSS vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter...

CVE-2014-1648

CVE-2014-1648 is a reflected XSS in Symantec Messaging Gateway 10.x prior to 10.5.2. The vulnerability resides in the management console’s brightmail/setting/compliance/DlpConnectFlow$view.flo component, exploitable via the displayTab parameter to inject arbitrary script/HTML in a user’s browser....

UBUNTU-CVE-2014-2892

Heap-based buffer overflow in the getanswer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP MMSH server response...

Symantec Messaging Gateway Management Console Reflected XSS

SUMMARY Symantecs Messaging Gateway management console is susceptible to a reflected cross-site scripting XSS issue found in one of the administrative interface pages. Successful exploitation could result in potential session hijacking or unauthorized actions directed against the console with the...

Symantec Messaging Gateway 10.5.1 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerability in Symantec Messaging Gateway Version 10.5.1 II. BACKGROUND ------------------------- Symantec Corporation is an American computer security, backup and availability solutions software corporation headquartered in...

F-Secure Messaging Security Gateway 'new'参数跨站脚本漏洞

Bugtraq ID:66959 CVE ID:CVE-2014-2844 F-Secure Messaging Security Gateway是一款消息安全网关解决方案。 F-Secure Messaging Security Gateway存在一个反射型跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 F-Secure Messaging Security Gateway 7.5.0 F-Secure Messaging Security Gateway 7.5.0 Patch...

F-Secure Messaging Security Gateway 7.5.0.892 Cross Site Scripting

F-Secure Messaging Security Gateway version 7.5.0.892 suffers from a reflective cross site scripting vulnerability. I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities F-Secure Messaging Security Gateway V7.5.0.892 II. BACKGROUND ------------------------- F-Secure...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

Cross site scripting

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

CVE-2014-2844 describes a reflected XSS in F-Secure Messaging Secure Gateway 7.5.0 prior to patch 1862. The issue results from the SysUser module’s new parameter allowing an authenticated admin to inject arbitrary web script/HTML when processing input, enabling potential cookie access or session ...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

DEBIAN-CVE-2014-2744

plugins/modcompression.lua in 1 Prosody before 0.9.4 and 2 Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cause a denial of service resource consumption via compressed XML elements in an XMPP stream, aka an...

CVE-2014-2542

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

Improper access control

The Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote...

Cross site scripting

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

Buffer overflow

Buffer overflow in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary...

CVE-2014-2541

The CVE-2014-2541 issue affects TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). The root cause is improper access control in these components, as deployed in TIBCO Rendezvous bef...

CVE-2014-2542

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

CVE-2014-2542

CVE-2014-2542 describes a cross-site scripting (XSS) vulnerability in TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). Affected versions are Rendezvous before 8.4.2, Messaging App...

Microsoft Internet Explorer CVE-2014-1753 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing Standard Avaya...