1613 matches found
CVE-2009-0540: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field...
U.S. needs to investigate cyberweapons
Despite what you may have seen on 24 or read in Tom Clancy’s novels, the United States is well behind much of the rest of the world in developing both defensive and offensive cybersecurity capabilities, and that’s a deficit that may end up costing us dearly in the long run, according to a longtim...
Nokia DX200 Denial Of Service
Vulnerability: Nokia TCP Syn Flood DoS - DX200 Synopsis : Denial of Service Affected Platforms: DX200 M13 MGW/HLR, S12 BSC Severity: High Risk Vendor: Nokia http://www.nokia.com/ Exploit Release Date: 01/21/2009 By: tambarus [email protected] !/usr/bin/perl eval "use Getopt::Long;";die "error...
CVE-2008-5628
SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter...
CVE-2008-5628: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter...
CVE-2008-3097
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
Cross site scripting
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
CVE-2008-3097
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
CVE-2008-3097: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter, or 2 the term parameter in a search action. NOTE: the currentsubsection parameter is already covered by CVE-2007-3889...
CVE-2008-2670: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter, or 2 the term parameter in a search action. NOTE: the currentsubsection parameter is already covered by CVE-2007-3889...
CVE-2008-0722
Cross-site scripting XSS vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter in a pagetoolsearch action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5621
Multiple cross-site scripting XSS vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, and Ubercart modules; allow remote authenticated users with a...
CVE-2007-5621: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, and Ubercart modules; allow remote authenticated users with a...
CVE-2003-1360: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the setupterm function of 1 lanadmin and 2 landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable...
CVE-2007-2610: Undefined Security Weakness
Cross-site scripting XSS vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter...
PT-2007-3929 · Openld · Openld
Name of the Vulnerable Software and Affected Versions: OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature,...
CVE-2007-2579
Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...