10756 matches found
CVE-2012-3297
Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
Cross site scripting
Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2012-3297
Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
Microsoft Internet Explorer 7 Denial Of Service
Microsoft Internet Explorer version 7.00.5730.13 suffers from a redirector denial of service vulnerability. Hello list! I want to warn you about Denial of Service vulnerabilities in Internet Explorer. I've found these DoS holes in IE7 already in August 2010. ------------------------- Affected...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in an about: page or 2 the last visited URL in the LastVisitWriteEn function in function.js...
CVE-2012-5906
Multiple cross-site scripting XSS vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in an about: page or 2 the last visited URL in the LastVisitWriteEn function in function.js...
opera to 12.10 (important)
This Opera 12.10 security update fixes following security issues: -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate...
CVE-2012-4851
Cross-site scripting XSS vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2012-4949
SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service...
CVE-2012-4851
Cross-site scripting XSS vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
PT-2012-5683 · Esri · Esri Arcgis
Name of the Vulnerable Software and Affected Versions: ESRI ArcGIS version 10.1 Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service. This can be achieved by accessing specific API endpoints, such as a...
Debian DSA-2567-1 : request-tracker3.8 - several vulnerabilities
Several vulnerabilities were discovered in Request Tracker RT, an issue tracking system. - CVE-2012-4730 Authenticated users can add arbitrary headers or content to mail generated by RT. - CVE-2012-4732 A CSRF vulnerability may allow attackers to toggle ticket bookmarks. - CVE-2012-4734 If users...
phptax 0.8 <= Remote Code Execution Vulnerability
----------------------------------------------------- phptax 0.8 = Remote Code Execution Vulnerability ----------------------------------------------------- Discovered by: Jean Pascal Pereira [email protected] Vendor information: "PhpTax is free software to do your U.S. income taxes. Tested under...
FirePass 7.0 SSL VPN - refreshURL Open Redirection
FirePass 7.0 SSL VPN - refreshURL Open Redirection source: https://www.securityfocus.com/bid/56156/info FirePass SSL VPN is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...
FirePass 7.0 SSL VPN - 'refreshURL' Open Redirection
source: https://www.securityfocus.com/bid/56156/info FirePass SSL VPN is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Versions prior to FirePass 7.0.0...
Valve Steam multiple security vulnerabilities
Buffer overflows, code executions and game engines vulnerabilities can be exploited via steam:// URI handler...
SeaMonkey 2.x < 2.13 Multiple Vulnerabilities
Binary data 6603.prm...