6299 matches found
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4666)
This update of flash player fixes a cross-site scripting vulnerability CVE-2011-2107. For further details please refer to http://www.adobe.com/support/security/bulletins/apsb11-13.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
CVE-2011-1157
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...
Unfixed XSS vulnerability at dutyfreehosting.com
Security researcher db, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting dutyfreehosting.com, which at the time of submission ranked 911435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...
Bacula-Web 1.3.x Cross Site Scripting / SQL Injection
GotGeek Labs http://www.gotgeek.com.br/ Bacula-web 1.3.x - 5.0.3 Multiple Remote Vulnerabilities + Description Bacula-Web is a web based tool that provide you a summarized view of your bacula director. It obtain his information from your bacula catalog's database. It provide some usefull...
phpWebSite <= 1.7.1 XSS Vulnerability - Active Check
phpWebSite is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Ports: phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. VID 753f8185-5ba9-42a4-be02-3f55ee580093 OpenVAS Vulnerability Test $ Description: Auto generated from VID 753f8185-5ba9-42a4-be02-3f55ee580093 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Unfixed XSS vulnerability at trapster.com
Security researcher Sony, has submitted on 21/01/2011 a cross-site-scripting XSS vulnerability affecting trapster.com, which at the time of submission ranked 200564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently...
Unfixed XSS vulnerability at www.bna.com.tn
Security researcher Electr0n Libre, has submitted on 28/12/2010 a cross-site-scripting XSS vulnerability affecting www.bna.com.tn, which at the time of submission ranked 1439724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...
Mandriva Update for git MDVSA-2010:256 (git)
Check for the Version of git OpenVAS Vulnerability Test Mandriva Update for git MDVSA-2010:256 git Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Unfixed XSS vulnerability at www.pixel.com.au
Security researcher db, has submitted on 19/12/2010 a cross-site-scripting XSS vulnerability affecting www.pixel.com.au, which at the time of submission ranked 1203873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...
CVE-2010-4396
Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying ...
Unfixed XSS vulnerability at www.foroswebgratis.com
Security researcher Deuvede, has submitted on 12/01/2010 a cross-site-scripting XSS vulnerability affecting www.foroswebgratis.com, which at the time of submission ranked 19616 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...
Unfixed XSS vulnerability at www.ilirija.si
Security researcher RoAdKiLlEr, has submitted on 21/09/2010 a cross-site-scripting XSS vulnerability affecting www.ilirija.si, which at the time of submission ranked 5627740 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...
Oracle BPM Process Administrator tips.jsp context Parameter XSS
The Oracle Business Process Manager BPM Suite's Process Administrator running on the remote host contains a JSP script - 'webconsole/faces/faces/faces/jsf/tips.jsp' - that fails to sanitize user input to the 'context' parameter before using it to generate dynamic HTML output. An attacker may be...
Mantis 1.2.x < 1.2.2 Cross-Site Scripting Vulnerability
Binary data 5619.prm...
Unfixed XSS vulnerability at smansapati.com
Security researcher robusta, has submitted on 07/07/2010 a cross-site-scripting XSS vulnerability affecting smansapati.com, which at the time of submission ranked 4912129 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is current...
ManageEngine ADAudit Plus 'reportList' Parameter XSS
The version of ADAudit Plus installed on the remote web server has a cross-site scripting vulnerability. Input passed to the 'reportList' parameter of 'jsp/audit/reports/ExportReport.jsp' is not properly sanitized before it is used to generate dynamic HTML content. An unauthenticated, remote...
ManageEngine ADManager Plus 'computerName' Parameter XSS
The version of ADManager Plus running on the remote web server has a cross-site scripting vulnerability. Input to the 'computerName' parameter of '/jsp/admin/tools/remoteshare.jsp' is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously...
VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0008 Synopsis: VMware View 3.1.3 addresses an important cross-site scripting vulnerability Issue date: 2010-05-05 Updated on:...