Ember.js XSS Vulnerability With {{link-to}} Helper in Non-block Form

In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, a change made to the implementation of the link-to helper means that any user-supplied data bound to the link-to helper's title attribute will not be escaped...

[CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

[CVE-2013-5676] Plain Text Password In SonarQube Jenkins Plugin

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

Jenkins 1.523 - Persistent HTML Code

Jenkins 1.523 - Persistent HTML Code 01. Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Informatio...

Jenkins 1.523 - Persistent HTML Code

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2013-246)

Multiple input checking flaws were found in the 2D component native image parsing code. A specially crafted image file could trigger a Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with the privileges of the user running the Java Virtual Machine...

PT-2013-1062

Name of the Vulnerable Software and Affected Versions D-Bus versions 1.4.x through 1.4.25 D-Bus versions 1.6.x through 1.6.11 D-Bus versions 1.7.x through 1.7.3 Description The issue allows local users to cause a denial of service via a crafted message, potentially disrupting the availability of...

Habbomobile / Sulake Blind SQL Injection

============================================ Habbomobile-SULAKE- Social Network Blind SQLInjection ============================================= I. VULNERABILITY ------------------------- Habbomobile.com/sulake.com Blind SQLInjection Author:Juan Carlos García Affected items /careers/ /press/award...

Adobe Reader U3D Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader 10.1.4 on OSX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsi...

Cisco Nexus 1000V ESXi Hypervisor Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 1000V Virtual Ethernet Module VEM kernel driver for VMware ESXi could allow an unauthenticated, remote attacker to cause the ESXi hypervisor to crash, resulting in a purple screen of death PSOD. The vulnerability is due to insufficient validation of STUN protoco...

PT-2013-2973

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Virtual Ethernet Module VEM kernel driver for VMware ESXi affected versions not specified Description A denial of service issue exists due to insufficient validation of STUN protocol packets, resulting in an out of bound arra...

kernel security update

2.6.32-358.6.2 - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094...

Mozilla Firefox Multiple Vulnerabilities -01 Feb13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01feb13win.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 Feb13 Windows Authors: Thanga Prakash S Copyright: Copyrigh...

Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Feb13 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvuln01feb13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Feb13 Mac OS X Authors: Thanga...

Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Feb13 (Windows)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvuln01feb13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Feb13 Windows Authors: Thanga Prakas...

Mozilla Firefox ESR Multiple Vulnerabilities -01 Feb13 (Mac OS X)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvuln01feb13macosx.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities -01 Feb13 Mac OS X Authors: Thanga Prakash S...

Mozilla Thunderbird Multiple Vulnerabilities -01 Feb13 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln01feb13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities -01 Feb13 Windows Authors: Thanga Prakash S...

SeaMonkey Multiple Vulnerabilities -01 (Feb 2013) - Windows

SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SeaMonkey Multiple Vulnerabilities -01 (Feb 2013) - Mac OS X

SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities -01 (Feb 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...