7467 matches found
Code injection
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...
CVE-2011-3178
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...
CVE-2011-3178
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...
CVE-2011-3178
The CVE-2011-3178 entry affects the web UI of openbuildservice prior to version 2.3.0. A code injection vulnerability in the project rebuildtimes statistics could be exploited by authorized attackers to execute shellcode. Impact is described as able to run arbitrary code with the attacker’s privi...
CVE-2011-3178 openbuildservice webui code injection
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...
CVE-2011-3178: Improper Neutralization of Special Elements used in an OS Command
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...
PT-2018-4032
Name of the Vulnerable Software and Affected Versions OpenBuildService versions prior to 2.3.0 Description A code injection issue in the web UI of the OpenBuildService allows authorized attackers to execute shellcode by manipulating the project rebuild times statistics. Recommendations For versio...
CentOS Update for mailman CESA-2018:0504 centos6
Check the version of mailman SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882858";...
CentOS Update for mailman CESA-2018:0505 centos7
Check the version of mailman SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882860";...
CentOS 6 : mailman (CESA-2018:0504)
An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CentOS 7 : mailman (CESA-2018:0505)
An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
mailman security update
CentOS Errata and Security Advisory CESA-2018:0505 An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
mailman security update
CentOS Errata and Security Advisory CESA-2018:0504 An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Cross site scripting
IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...
Cross site scripting
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906...
Oracle Linux 6 : mailman (ELSA-2018-0504)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0504 advisory. 3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves...
PT-2018-12496
Name of the Vulnerable Software and Affected Versions IBM Application Performance Management - Response Time Monitoring Agent versions 8.1.3 through 8.1.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leadi...
CVE-2018-1441: Improper Neutralization of Input During Web Page Generation
IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...
PT-2018-12516
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.5 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
CVE-2018-1444: Improper Neutralization of Input During Web Page Generation
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906...