612 matches found
CVE-2014-7258
Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-7258
CVE-2014-7258 is an XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier that can execute arbitrary script in the browser when viewed with certain Internet Explorer versions. JVN details indicate the issue affects Clip Board up to ver. 2.91 and can be exploited in IE 5.01–7 environments lack...
KENT-WEB Clip Board vulnerable to cross-site scripting
Overview KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Sen UENO of Tricorder Co. Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...
JVN#12798709: KENT-WEB Clip Board vulnerable to cross-site scripting
KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...
CVE-2014-6692
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6692
The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6692
The CVE-2014-6692 issue affects the Android app Kingsoft Clip (Office Tool) cn.wps.clip, version 1.5.1. The underlying flaw is that the app does not verify X.509 certificates from SSL servers, enabling a man‑in‑the‑middle attacker to spoof servers and potentially exfiltrate sensitive information ...
Clip Bucket <= 1.7.1 Insecure Cookie Handling Vulnerability
No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...
clip bucket 2.6 - Multiple Vulnerabilities
No description provided by source. Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : No...
Microsoft Clip Art Gallery 5.0 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1034/info A vulnerability exists within the Microsoft Clip Art Gallery, where a remote user can crash the Clip Art application or possibly execute arbitrary code. Clip art can be downloaded from any website and incorporat...
CVE-2013-3649
Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...
Cross site scripting
Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...
CVE-2013-3649
The CVE-2013-3649 issue affects KENT-WEB CLIP-MAIL (before version 3.4). The root cause is a cross-site scripting (XSS) vulnerability in the webpage output of strings entered in a form, triggered when using Internet Explorer 7 or earlier. Affected products are CLIP-MAIL versions up to 3.3 (per JV...
CVE-2013-3649
Cross-site scripting XSS vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...
CLIP-MAIL vulnerable to cross-site scripting
Overview CLIP-MAIL provided by KENT-WEB contains an issue in the webpage output of strings entered in the form, which may result in a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version...
JVN#85804149: CLIP-MAIL vulnerable to cross-site scripting
CLIP-MAIL provided by KENT-WEB contains an issue in the webpage output of strings entered in the form, which may result in a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version accordin...
ClipShare 4.1.1 - gid Blind SQL Injection
ClipShare 4.1.1 - gid Blind SQL Injection Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions ar...
ClipShare 4.1.1 - 'gid' Blind SQL Injection
Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Note : this vulnerable work...
Use of SVG clipPaths can allow execution of arbitrary code – Opera Security Advisories
When SVG documents with specifically prepared clipPaths are used in Opera, Opera may allow other content to overwrite the memory, before referencing the memory, which will lead to a crash. If an attacker can control the contents being written into memory, execution of arbitrary code may occur...