8648 matches found
CVE-2016-1311
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags
It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...
jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags
It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...
Ruby on Rails jquery-ujs和jquery-rails安全绕过漏洞
Impact In the scenario where an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag that will trigger a POST action, the attacker can set the href or action to " https://attacker.com" note the leading space that will be passed to JQuery, who...
Apple QuickTime ID3 Tag Heap Buffer Overflow Remote Code Execution Vulnerability
QuickTime is a multimedia architecture developed by Apple Computer that can handle many types of digital video, media clips, sound effects, text, animation, music formats, and interactive panoramic images. Apple QuickTime has a security vulnerability in the ID3 version tag parsing of MP3 files. T...
DEBIAN-CVE-2015-7554
The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image...
Code injection
The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image...
CVE-2015-7554
The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image...
UBUNTU-CVE-2015-7554
The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image...
The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.
The vulnerability of the Flash Player and Adobe Integrated Runtime programs arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted MP3 file with a COMM tag...
Google Search Engine Rank Prefers HTTPS
Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...
flash-plugin: multiple code execution issues fixed in APSB15-32
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...
Dell Foundation Services <= 2.3.3800.0A00 Information Disclosure Vulnerability - Active Check
An issue in Dell Foundation Services, version 2.3.3800.0A00 and below, can be exploited by a malicious website to leak the Dell service tag of a Dell system, which can be used for tracking purposes, or for social engineering. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might ...
wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)
The dissectwapayload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service application crash via a crafted packet...
dotclear 2.8.1 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: dotclear 2.8.1 Fixed in: 2.8.2 Fixed Version Link: http://download.dotclear.org/latest.zip Vendor Website: http://dotclear.org/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to...
Google Picasa Heap Buffer Overflow Vulnerability
Google Picasa is a suite of applications for organizing and editing digital photos. An integer overflow vulnerability exists in Google Picasa 3.9.140 Build 239,Build 248, which can be exploited by a remote attacker to execute arbitrary code after triggering a heap buffer overflow with data relate...
Google Picasa 'phase one' tag integer overflow vulnerability
Google Picasa is a set of free image management tools. An integer overflow vulnerability exists in Google Picasa 'phase one' tag handling. A remote attacker can exploit this vulnerability to construct a malicious file and trick the application into parsing it, which could crash the application or...
[SECURITY] Fedora 23 Update: drupal7-active_tags-2.0-0.9.alpha1.fc23
Active Tags adds a new option to free tagging taxonomies. If selected the taxonomy widget is replaced by a new jQuery enabled tag entry widget. This package provides the following Drupal 7 module: activetags...
sydresor.se XSS vulnerability
Vulnerable URL: http://www.sydresor.se/tag/"'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check sydresor.se...
