CVE-2011-3178

The CVE-2011-3178 entry affects the web UI of openbuildservice prior to version 2.3.0. A code injection vulnerability in the project rebuildtimes statistics could be exploited by authorized attackers to execute shellcode. Impact is described as able to run arbitrary code with the attacker’s privi...

CVE-2011-3178 openbuildservice webui code injection

In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode...

CentOS 6 : mailman (CESA-2018:0504)

An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CentOS Update for mailman CESA-2018:0505 centos7

Check the version of mailman SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882860";...

CentOS Update for mailman CESA-2018:0504 centos6

Check the version of mailman SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882858";...

CentOS 7 : mailman (CESA-2018:0505)

An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

mailman security update

CentOS Errata and Security Advisory CESA-2018:0505 An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

mailman security update

CentOS Errata and Security Advisory CESA-2018:0504 An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Cross site scripting

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906...

Cross site scripting

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

Scientific Linux Security Update : mailman on SL7.x x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108334; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Oracle Linux 6 : mailman (ELSA-2018-0504)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0504 advisory. 3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves...

Moderate: Red Hat Security Advisory: mailman security update

An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: mailman security update

An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

mailman security update

3:2.1.15-26.1 - Related: 1545974 - Add import regular expression module 3:2.1.15-26 - Related: 1545974 - Bump release to make it higher than 7.5 3:2.1.15-24.2 - Resolves: 1545974 - Add sanitizer to mitigate XSS injection 3:2.1.15-24.1 - Resolves: 1545974 - Fix XSS vulnerability in web UI...

mailman security update

3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves: 1545967 - Fix XSS vulnerability in web UI...

IBM Daeja ViewONE Virtual Cross-Site Scripting Vulnerability

IBM Daeja ViewONE Virtual is a document viewer from IBM USA that supports viewing of TIFF, PDF and Office-based documents. A cross-site scripting vulnerability exists in IBM Daeja ViewONE Virtual. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the Web UI...

CVE-2018-1399

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2018-1416

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1388...

CVE-2018-1399

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...