Open-Xchange Guard 2.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Open-Xchange Guard Vendor: Open-Xchange GmbH Internal reference: 41466 Bug ID Vulnerability type: Cross-Site-Scripting CWE-80 Vulnerable version: 2.0 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-07509)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists when Microsoft IE versions 10 and 11 fail to properly access objects in memory. An...

Microsoft Internet Explorer CVE-2015-6087 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

AlienVault OSSIM Cross-Site Request Forgery Vulnerability

AlienVault OSSIM is an open source security information management system. AlienVault OSSIM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

Microsoft Windows Point of Entry Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to run arbitrary code in the security context of a user running a compromised...

Microsoft Office Web Apps Cross-Site Scripting Vulnerability

Microsoft Office Web Apps Server is an Office Server product from the U.S. company Microsoft Microsoft that provides browser-based file viewing and editing capabilities for Office documents. A cross-site scripting vulnerability exists in Microsoft Office Web Apps Server. An attacker could exploit...

McAfee Vulnerability Manager 'Organizations' Cross-Site Request Forgery Vulnerability

McAfee Vulnerability Manager is a vulnerability management application. A cross-site request forgery vulnerability exists on the McAfee Vulnerability Manager 'Organizations' page, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user context...

Cisco TelePresence Server Software Cross-Site Request Forgery Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. A cross-site request forgery vulnerability exists in Cisco TelePresence Server Software that could allow a remote attacker to construct a malicious URI, trick a user into resolving it, and perform...

Orient Technologies Studio for OrientDB Server Community Edition Cross-Site Request Forgery Vulnerability

Orient Technologies Studio for OrientDB Server Community Edition is a community edition of OrientDB Server from Orient Technologies, UK. A cross-site request forgery vulnerability exists in Orient Technologies Studio for OrientDB Server Community Edition, which allows remote attackers to construc...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-05990)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A memory corruption vulnerability exists when Microsoft Office software fails to properly handle objects in memory, which can be exploited by a remote attacker to execute arbitrary...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-05989)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A memory corruption vulnerability exists when Microsoft Office software fails to properly handle objects in memory, which can be exploited by a remote attacker to execute arbitrary...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-05987)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A memory corruption vulnerability exists when Microsoft Office software fails to properly handle objects in memory, which can be exploited by a remote attacker to execute arbitrary...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05905)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 and 8 fail to properly access objects in memory. The vulnerability allo...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05911)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 through 11 fail to properly access objects in memory. The vulnerability...

Microsoft Edge and Internet Explorer CVE-2015-2494 Remote Memory Corruption Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...

Fedora 23 : drupal6-ctools-1.14-1.fc23 (2015-14329)

See Ctools - Critical - Multiple Vulnerabilities - SA- CONTRIB-2015-141. This is an incremental security and bugfix release for ctools. Looking to fix future D6 CTools issues? Find japerry or merlinofchaos in drupal-scotch, drupal- contribute, or drupal-panels -- and become a maintainer for D6...

Cisco Prime Infrastructure Web Interface Cross-Site Request Forgery Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. A cross-site request forgery vulnerability exists in Cisco Prime Infrastructure that could...

ManageEngine Service Desk File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine ServiceDesk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of uploaded files. The issue lies in the ability to use director...

Mozilla Firefox memory corruption vulnerability (CNVD-2015-05349)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. A memory corruption vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to cause a denial of service by executing arbitrary code in the user's context...

Mozilla Firefox memory corruption vulnerability (CNVD-2015-05348)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. A memory corruption vulnerability exists in Mozilla Firefox, which allows an attacker to cause a denial of service by executing arbitrary code in the user's context...