connect cross-site scripting vulnerability

connect is an extended HTTP server framework for use in Node.js. A cross-site scripting vulnerability exists in versions of connect prior to 2.14.0, which stems from the program's lack of validation of files in the directory js middleware. This vulnerability can be exploited to inject arbitrary w...

Cisco WebEx Meetings Player Remote Code Execution Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Player due to the program not properly validating user-supplied files. An unauthenticated remote user could exploit this vulnerability to execute arbitrary code with user privileges...