Tree BBS from Let's PHP! vulnerable to cross-site scripting

Overview Tree BBS from Let's PHP! contains a cross-site scripting vulnerability. Tree BBS from Let's PHP! is a tree-structured bulletin board software. Tree BBS contains a cross-site scripting vulnerability. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA. JPCERT/CC...

Movable Type cross-site scripting vulnerability

Overview Movable Type contains a cross-site scripting vulnerability. Movable Type, a web log system from Six Apart KK, contains a cross-site scripting vulnerability. This vulnerability is a different vulnerability than past reports on JVN. A successful attack requires mt-wizard.cgi not to be...

Google Chrome Web Script Execution Vulnerabilities - Jun09

This host has Google Chrome installed and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromebofvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Google Chrome Browser Kernel Buffer Overflow Vulnerability - Jun09 Authors: Sharath S Copyright: Copyright ...

Debian: Security Advisory (DSA-1816-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site scripting vulnerability in activeCollab

Overview activeCollab from A51 D.O.O. contains a cross-site scripting vulnerability. activeCollab from A51 D.O.O. is software for project management. activeCollab contains a cross-site scripting vulnerability. Daiki Fukumori reported this vulnerability to IPA. JPCERT/CC coordinated with the vendo...

XSS vulnerability can be exploited on the WebDAV Configuration page

Steps: Go to WebDAV Configuration Enter 'alert"XSS"' Click on 'Add new regex' button The script will be executed. It will continue to be executed whenever a user clicks on the 'Save' button. This can be done by users in the confluence-admin group, so it could be used by them to gain access to...

Microsoft Internet Explorer Web Script Execution Vulnerabilities

This host has Internet Explorer installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmsiewebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Microsoft Internet Explorer Web Script Execution Vulnerabilities Authors: Sharath S Copyright:...

Opera Web Script Execution Vulnerabilities - June09 (Linux)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Linux Authors: Sharath S Copyright: Copyrigh...

Apple Safari Web Script Execution Vulnerabilities - June09

This host has Safari browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafariwebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Apple Safari Web Script Execution Vulnerabilities - June09 Authors: Sharath S Copyright:...

Google Chrome Web Script Execution Vulnerabilities - June09

This host has Google Chrome installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromewebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Google Chrome Web Script Execution Vulnerabilities - June09 Authors: Sharath S Copyright:...

Google Chrome Web Script Execution Vulnerabilities (Jun 2009)

Google Chrome is prone to multiple web script execution vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Web Script Execution Vulnerabilities (Jun 2009) - Linux

Opera browser is prone to multiple web script execution vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2068

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site,...

CVE-2009-2068

Removed by vendor...

Cross site scripting

Cross-site scripting XSS vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

CVE-2009-1715

Cross-site scripting XSS vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges...

CVE-2009-1715

CVE-2009-1715 affects Apple Safari/WebKit (Web Inspector) prior to version 4.0. The vulnerability is an XSS issue in Web Inspector that allows user-assisted remote attackers to inject arbitrary script or HTML and to read local files by exploiting script execution with incorrect privileges. Connec...

CVE-2009-0239

CVE-2009-0239 is a Windows Search 4.0 information-disclosure vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The flaw arises from an unfiltered HTML/embedded content rendering when Previewing or loading a crafted file in Windows Search results, allowing a remote attacker t...

CVE-2009-1715

Removed by vendor...