Lucene search
+L

1908 matches found

NVD
NVD
•added 2013/09/13 2:10 p.m.•50 views

CVE-2013-4705

Cross-site scripting XSS vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding...

4.3CVSS5.6AI score0.01788EPSS
SaveExploits0References3
Prion
Prion
•added 2013/09/13 2:10 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding...

4.3CVSS6.2AI score0.01788EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2013/09/13 10:00 a.m.•79 views

CVE-2013-4705

Consolidated details for CVE-2013-4705 show an XSS vulnerability in Opera before version 15.00, exploitable via improper handling of UTF-8 encoding. Affected software: Opera browser (pre-15.00). Root cause (as stated): cross-site scripting due to UTF-8 encoding/validation issues. Impact is descri...

4.3CVSS5.8AI score0.01788EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2013/09/13 10:00 a.m.•47 views

CVE-2013-4705

Cross-site scripting XSS vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding...

5.6AI score0.01788EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/13 12:00 a.m.•3 views

CVE-2013-4705: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding...

4.3CVSS5.9AI score0.01788EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/09/12 12:00 a.m.•44 views

JVN#01094166: Opera vulnerable to cross-site scripting

Opera is a web browser. Opera contains a cross-site scripting vulnerability when the page encoding settings are set to UTF-8. Impact An arbitrary script may be executed on the user's web browser. Solution Apply an Update Update to the latest version according to the information provided by the...

4.3CVSS5.7AI score0.01788EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•30 views

Oracle Linux 3 / 4 : 4Suite (ELSA-2009-1572)

From Red Hat Security Advisory 2009:1572 : An updated 4Suite package that fixes one security issue is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The 4Suite package contains XML-related...

5CVSS6.3AI score0.27924EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•29 views

Oracle Linux 5 : Moderate: / gimp (ELSA-2007-0513)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0513 advisory. 1.2.3-20.9.el3 - validate bytesperline header field when loading PCX files 247570 1.2.3-20.8.el3 - reduce GIMPMAXIMAGESIZE to 2^18 to detect bogus imag...

6.8CVSS5.7AI score0.07169EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2013/07/09 3:03 p.m.•62 views

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

6.8CVSS6.9AI score0.0135EPSS
SaveExploits5References7
NVD
NVD
•added 2013/06/21 7:55 p.m.•36 views

CVE-2013-0523

IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8...

4.3CVSS6.1AI score0.00748EPSS
SaveExploits0References5
Prion
Prion
•added 2013/06/21 7:55 p.m.•25 views

Design/Logic Flaw

IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8...

4.3CVSS6.5AI score0.00748EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
•added 2013/04/25 12:00 a.m.•52 views

RedHat Update for kernel RHSA-2013:0744-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:0744-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.2CVSS1AI score0.0135EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2013/04/25 12:00 a.m.•54 views

RedHat Update for kernel RHSA-2013:0744-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.0135EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2013/04/25 12:00 a.m.•50 views

CentOS Update for kernel CESA-2013:0744 centos6

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:0744 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

7.2CVSS0.9AI score0.0135EPSS
SaveExploits7References2
Cent OS
Cent OS
•added 2013/04/24 2:13 a.m.•102 views

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:0744 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

7.2CVSS7.1AI score0.22475EPSS
SaveExploits14References7
Tenable Nessus
Tenable Nessus
•added 2013/04/20 12:00 a.m.•24 views

Mandriva Linux Security Advisory : boost (MDVSA-2013:065)

Updated boost packages fix security vulnerability : A security flaw was found in the way orderedmalloc routine implementation in Boost, the free peer-reviewed portable C++ source libraries, performed 'next-size' and 'maxsize' parameters sanitization, when allocating memory. If an application, usi...

5CVSS8.7AI score0.03889EPSS
SaveExploits1References2
NVD
NVD
•added 2013/03/12 10:55 p.m.•29 views

CVE-2013-0252

boost::locale::utf::utftraits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes...

5CVSS6.5AI score0.0287EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2013/03/12 9:00 p.m.•55 views

CVE-2013-0252

boost::locale::utf::utftraits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes...

6.3AI score0.0287EPSS
SaveExploits0References11
CVE
CVE
•added 2013/03/12 9:00 p.m.•79 views

CVE-2013-0252

The CVE-2013-0252 entry concerns Boost.Locale’s boost::locale::utf::utf_traits, where Boost versions 1.48–1.52 fail to detect certain invalid UTF-8 sequences. This could allow bypassing input validation via crafted trailing bytes. Connected advisories (openSUSE, SUSE, Mandriva/MDVSA-2013:065, Fed...

5CVSS6.5AI score0.0287EPSS
SaveExploits0References11Affected Software1
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•29 views

CentOS Update for evolution CESA-2013:0516 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS7.3AI score0.02673EPSS
SaveExploits0References2
Rows per page
Query Builder