IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service

source: https://www.securityfocus.com/bid/33169/info IBM WebSphere DataPower XML Security Gateway XS40 is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to cause the device to reboot, denying service to...

Openfire 3.6.2 - log.jsp Directory Traversal

Openfire 3.6.2 - log.jsp Directory Traversal source: https://www.securityfocus.com/bid/32945/info Openfire is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information...

PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40630/info PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Plunet BusinessManager 4.1 - pagesUTF8Sys_DirAnzeige.jsp?Pfad Direct Request Information Disclosure

Plunet BusinessManager 4.1 - pagesUTF8SysDirAnzeige.jsp?Pfad Direct Request Information Disclosure source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplie...

Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosure

source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

Plunet BusinessManager 4.1 - pagesUTF8auftrag_allgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities

Plunet BusinessManager 4.1 - pagesUTF8auftragallgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize...

Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

aMSN - .ctt Remote Denial of Service

aMSN - .ctt Remote Denial of Service source: https://www.securityfocus.com/bid/33096/info aMSN is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers can exploit this issue by enticing an unsuspectin...

MagpieRSS 0.72 - CDATA HTML Injection

MagpieRSS 0.72 - CDATA HTML Injection source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

Mavi Emlak - newDetail.asp SQL Injection

Mavi Emlak - newDetail.asp SQL Injection source: https://www.securityfocus.com/bid/33041/info Mavi Emlak is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or...

Madrese-Portal - 'haber.asp' SQL Injection

source: https://www.securityfocus.com/bid/33045/info Madrese-Portal is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Mavi Emlak - 'newDetail.asp' SQL Injection

source: https://www.securityfocus.com/bid/33041/info Mavi Emlak is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

MagpieRSS 0.72 - CDATA HTML Injection

source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of th...

Injader 2.1.1 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/32843/info Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in...

PrestaShop 1.1 - '/admin/login.php?PATH_INFO' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32689/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Fantastico - index.php Local File Inclusion

Fantastico - index.php Local File Inclusion source: https://www.securityfocus.com/bid/32578/info Fantastico is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts ...

Venalsur Booking Centre 2.01 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/32530/info Venalsur Booking Centre is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

Linksys WRT160N - apply.cgi Cross-Site Scripting

Linksys WRT160N - apply.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/32496/info Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into...

Novell eDirectory Multiple Vulnerabilities Nov08 - (Windows)

This host is running Novell eDirectory and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovelledirmultvulnnov08win.nasl 5370 2017-02-20 15:24:26Z cfi $ Novell eDirectory Multiple Vulnerabilities Nov08 - Windows Authors: Veerendra GG Copyright: Copyright c 2008 Greenbone...

Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)

Microsoft Visual Studio is designed for building Windows based applications and Web solutions. A buffer overflow vulnerability has been reported in Microsoft Visual Studio. The vulnerability is due to a memory corruption error in the Visual Basic MaskedEdit ActiveX control when it fails to proper...