CVE-2017-8892

CVE-2017-8892 describes a cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 where an attacker can persistently inject arbitrary web script or HTML via the name of an uploaded image. The issue is documented across multiple feeds (NVD/Red Hat/CNVD/CVE listing) with both CVSS2 (4...

search.tempo.co XSS vulnerability

Vulnerable URL: https://search.tempo.co/index.php/search/result?submit='"--!...

SGI Tempo multiple security vulnerabilities

Privilege escalation, information leakage...

[CVE-2014-7301] SGI Tempo System Database Password Exposure

SGI Tempo System Database Password Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7301 Author: John Fitzpatrick, MWR Labs Severity: Medium Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It i...

SGI Tempo vx Setuid Privilege Escalation

SGI SUID Root Privilege Escalation Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7302 Author: Luke Jennings, John Fitzpatrick, MWR Labs Severity: Medium Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Descriptio...

SGI Tempo Database Exposure

SGI Tempo System Database Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7303 Author: John Fitzpatrick, MWR Labs Severity: Low Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It is possible f...

SGI Tempo Database Password Disclosure

SGI Tempo System Database Password Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7301 Author: John Fitzpatrick, MWR Labs Severity: Medium Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It i...

Atlassian JIRA < 5.0.1 XML Parsing DoS

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to 5.0.1. It is, therefore, potentially affected by an XML parsing flaw due to improper restrictions on the capabilities of third-party parsers. A remote, authenticated attacker c...

CVE-2012-2927

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service resource consumption via unspecified vectors...

Code injection

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service resource consumption via unspecified vectors...

CVE-2012-2927

The CVE-2012-2927 vulnerability applies to Atlassian Jira with the TM Software Tempo Plugin. The Tempo Plugin versions affected are: 6.4.3.1 and earlier in the 6.5.x line prior to 6.5.0.2, and 7.x prior to 7.0.3. The issue is that the plugin does not properly restrict the capabilities of third‑pa...

CVE-2012-2927

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service resource consumption via unspecified vectors...

Atlassian Tempo 6.4.3 JIRA 5.0.0 Gliffy 3.7.0 - XML Parsing Denial of Service

Atlassian Tempo 6.4.3 JIRA 5.0.0 Gliffy 3.7.0 - XML Parsing Denial of Service...

Atlassian Tempo 6.4.3 / JIRA 5.0.0 / Gliffy 3.7.0 - XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/53595/info JIRA, and the Gliffy and Tempo plugins for JIRA are prone to a denial-of-service vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of-service conditions in the...

Fedora Update for tuxguitar FEDORA-2010-15650

Check for the Version of tuxguitar OpenVAS Vulnerability Test Fedora Update for tuxguitar FEDORA-2010-15650 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 13 Update: tuxguitar-1.2-3.fc13

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

[SECURITY] Fedora 14 Update: tuxguitar-1.2-3.fc14

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...