CVE-2013-7182

Fortinet FortiOS FortiGate is affected by CVE-2013-7182 (XSS) in the web UI path /firewall/schedule/recurrdlg, via the mkey parameter. Affected versions are FortiOS 5.0.5 (and prior to 5.0.6 per advisory sources) with a vulnerability that allows remote attackers to inject arbitrary script/HTML in...

CVE-2013-7182: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey parameter...

PT-2014-2006

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.0.5 Description The issue is caused by insufficient protection of the web page structure in the FortiOS operating system, specifically in the firewall/schedule/recurrdlg component. This allows a remote attacker to inject...

HackInTheBox Quartal Magazine - eZine Issue 10

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 10 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/hitbez10.pdf Original: http://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-010.pdf Release Date: ============= 2014-01-31...

HackInTheBox Quartal Magazine - eZine Issue 10

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 10 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/hitbez10.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-010.pdf Release Date: ============= 2014-01-31...

CVE-2013-6321

SQL injection vulnerability (CVE-2013-6321) affects IBM Atlas Suite components (Atlas eDiscovery Process Management 6.0.1.5 and earlier/6.0.2; Disposal and Governance Management for IT 6.0.1.5 and earlier/6.0.2; Global Retention Policy and Schedule Management 6.0.1.5 and earlier/6.0.2). Root caus...

CVE-2013-6321

SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite aka Atlas Policy Suit...

CVE-2013-6334: Improper Input Validation

IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite aka Atlas Policy Suite do not properly validate...

PT-2014-3090

Name of the Vulnerable Software and Affected Versions IBM Atlas eDiscovery Process Management versions 6.0.1.5 and earlier and 6.0.2 IBM Disposal and Governance Management for IT versions 6.0.1.5 and earlier and 6.0.2 IBM Global Retention Policy and Schedule Management versions 6.0.1.5 and earlie...

PT-2014-3095

Name of the Vulnerable Software and Affected Versions IBM Atlas eDiscovery Process Management versions 6.0.1.5 and earlier and 6.0.2 Disposal and Governance Management for IT versions 6.0.1.5 and earlier and 6.0.2 Global Retention Policy and Schedule Management versions 6.0.1.5 and earlier and...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20131223)

This update adds the following enhancement : The Jordanian government has reversed its decision to observe daylight saving time DST all year and in the year 2014, Jordan is going to resume to the transition schedule from the years 2006 - 2011. This year, Jordan will switch back to Arabia Standard...

CVE-2013-6903

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6903

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6903

The CVE-2013-6903 entry describes a Cross-site scripting (XSS) vulnerability in the scheduling component of Cybozu Garoon, affecting Garoon before 3.7.0. The issue can be triggered when using Internet Explorer or Firefox, allowing remote attackers to inject arbitrary web script or HTML via unspec...

PT-2013-6173

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the schedule component of Cybozu Garoon, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet...

CVE-2013-6903: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

10 years of Update Tuesdays

On October 1, 2003, Microsoft announced it would move to a monthly security bulletin cadence. Today, marks 10 years since that first monthly security update. We looked at many ways to improve our security preparedness and patch timing was the number one customer request. Your feedback was clear a...

[SECURITY] Fedora 18 Update: WebCalendar-1.2.7-1.fc18

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...

[SECURITY] Fedora 19 Update: WebCalendar-1.2.7-1.fc19

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...