Adobe Shockwave Player Director File FFFFFF45 Record Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CentOS Update for seamonkey CESA-2010:0557 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0557 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Nagios XI - login.php Multiple Cross-Site Scripting Vulnerabilities

Nagios XI - login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42604/info Nagios XI is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the contex...

MybbCentral TagCloud 2.0 - Topic HTML Injection

MybbCentral TagCloud 2.0 - Topic HTML Injection source: https://www.securityfocus.com/bid/42406/info TagCloud is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Microsoft Internet Explorer 'OnPropertyChange_Src()' Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Microsoft Silverlight ActiveX Control Pointer Memory Corruption Vulnerability

Description Microsoft Silverlight ActiveX control is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the...

Microsoft Internet Explorer 'boundElements' Use-After-Free Error Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service...

Nasim Guest Book - page Cross-Site Scripting

Nasim Guest Book - page Cross-Site Scripting source: https://www.securityfocus.com/bid/42503/info Nasim Guest Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Onyx - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42446/info Onyx is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Prado Portal 1.2 - page Cross-Site Scripting

Prado Portal 1.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/42276/info Prado Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Prado Portal 1.2 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42276/info Prado Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

DiamondList - usermainupdate_category?category[description] Cross-Site Scripting

DiamondList - usermainupdatecategory?categorydescription Cross-Site Scripting source: https://www.securityfocus.com/bid/42252/info DiamondList is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before usin...

Researcher Reveals Major SSL and Browser Flaws

LAS VEGAS–A security researcher has found a slew of fundamental problems with the way that modern browsers are designed and built, leading to serious questions about the security of these applications and the way that they handle SSL sessions. The research, done by Robert Hansen of SecTheory, sho...

Microsoft Access ActiveX Control Multiple Instantiation Remote Code Execution Vulnerability

Description Microsoft Access is prone to a remote code-execution vulnerability that affects ActiveX instantiations. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the...

eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities

eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

Joomla! Component Rapid-Recipe - HTML Injection

source: https://www.securityfocus.com/bid/41531/info Joomla! Rapid-Recipe component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41453/info Worxware DCP-Portal is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...