3841 matches found
CVE-2012-5349: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
PT-2012-5944
Name of the Vulnerable Software and Affected Versions Pay With Tweet plugin versions prior to 1.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the link, title, or dl...
Elcom CMS 7.4.10 Community Manager Insecure File Upload
Exploit for asp platform in category web applications Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security Advisory - SOS-12-008 Release Date. 24-Aug-2012 Last Update. - Vendor Notification Date. 28-Oct-2011 Product. Elcom CMS - Community Manager Platform. ASP.NET Affected...
Adobe Flash Player 11.3 Font Parsing Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...
CVE-2012-4283
Cross-site scripting XSS vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter...
CVE-2012-4283
Cross-site scripting XSS vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter...
CVE-2012-4283
CVE-2012-4283 describes a Cross-site Scripting (XSS) vulnerability in the WordPress Login With Ajax plugin prior to version 3.0.4.1, where an attacker can inject arbitrary script or HTML via the callback parameter. This affects the plugin’s input handling and could compromise user sessions or sit...
PT-2012-5311
Name of the Vulnerable Software and Affected Versions Login With Ajax plugin versions prior to 3.0.4.1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the callback parameter...
CVE-2012-4283: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter...
CVE-2012-2817: Undefined Security Weakness
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections...
PT-2012-4278
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly hav...
java-1.6.0-openjdk security update
1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828751 1:1.6.0.0-1.47.1.11.3 - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch: - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils. - packages...
CVE-2012-2759
CVE-2012-2759 affects the WordPress plugin Login With Ajax (aka login-with-ajax). The vulnerability is a cross-site scripting (XSS) flaw in login-with-ajax.php, exploitable via the callback parameter in a lostpassword action to wp-login.php. It concerns versions before 3.0.4.1. Impact stated in t...
CVE-2012-2759
Cross-site scripting XSS vulnerability in login-with-ajax.php in the Login With Ajax aka login-with-ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php...
PT-2012-4240
Name of the Vulnerable Software and Affected Versions Login With Ajax plugin versions prior to 3.0.4.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the callback parameter in a lostpassword action to wp-login.php...
CVE-2012-2759: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in login-with-ajax.php in the Login With Ajax aka login-with-ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php...
CVE-2012-0269: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, oreplug, Shuriken Pro4, Shuriken 2007 through 2010, Shuriken Pr...
CVE-2011-5000
The sshgssapiparseename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service memory consumption via a large value in a certain length field. NOTE: there may be limited scenarios in which...
DEBIAN-CVE-2011-5000
The sshgssapiparseename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service memory consumption via a large value in a certain length field. NOTE: there may be limited scenarios in which...