CVE-2012-2298: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 "user names in page titles" and 2 "autocomplete callbacks."...

PT-2012-3932

Name of the Vulnerable Software and Affected Versions Drupal RealName module versions 6.x-1.x before 6.x-1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 user names in page titles and 2 autocomplete callbacks, specifically in the...

CentOS Update for bash CESA-2011:1073 centos5 x86_64

Check for the Version of bash OpenVAS Vulnerability Test CentOS Update for bash CESA-2011:1073 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Apple Safari < 6.0 安全限制绕过漏洞(CVE-2012-0680)

BUGTRAQ ID: 54688 CVE ID: CVE-2012-0680 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari 6.0之前版本没有正确处理密码输入元素的autocomplete属性，在实现存在安全限制绕过漏洞，攻击者可利用此漏洞通过无人监视的工作站绕过身份验证。 0 Apple Safari 6.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Authentication flaw

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

CVE-2012-0680

CVE-2012-0680 affects Apple Safari on macOS prior to 6.0. The vulnerability arises from improper handling of the password input element’s autocomplete attribute, allowing a remote attacker to bypass authentication on an unattended workstation. The issue specifically concerns password fields that ...

CVE-2012-0680

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

PT-2012-2786

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description The issue allows remote attackers to bypass authentication by leveraging an unattended workstation, due to improper handling of the autocomplete attribute of a password input element...

CVE-2012-0680: Undefined Security Weakness

Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

Cross site scripting

Cross-site scripting XSS vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4278

Cross-site scripting XSS vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-1826

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.10 Moodle versions 2.0.x through 2.0.1 Description A cross-site scripting XSS issue exists in the tag autocomplete functionality, allowing remote attackers to inject arbitrary web script or HTML via unspecifie...

CVE-2011-4278: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2012-107 - Search autocomplete - Access bypass

This module allows you to add autocomplete functionality to virtually any fields of a Drupal site. The module doesn't sufficiently protect access to the module admin page. This vulnerability is mitigated by the fact that the user can only access the page, disable an autocompletion or change...

CVE-2012-2012

HP System Management Homepage SMH before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2012-2012: Undefined Security Weakness

HP System Management Homepage SMH before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

Japan orders Google to remove auto-complete function over privacy complaint

Japan orders Google to remove auto-complete function over privacy complaint Google has been ordered to disable part of its autocomplete function in Japan after complaints it violates privacy. According to a report by The Japan Times, the court was acting on a petition accusing Google's autocomple...

Cross site scripting

Cross-site scripting XSS vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0323

Cross-site scripting XSS vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0323

CVE-2012-0323 concerns the SquirrelMail Autocomplete plugin prior to version 3.0, which contains a cross-site scripting (XSS) vulnerability that can allow an attacker to inject arbitrary script or HTML via unspecified vectors. The vulnerability affects the Autocomplete component used in SquirrelM...