Cross site scripting

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

UBUNTU-CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Summary: CVE-2015-6506 is a cross-site scripting (XSS) vulnerability in the Request Tracker (RT) cryptography interface, exploitable via a crafted public key in RT 4.x. Affected software: Request Tracker, versions before 4.2.12 (RT 4.x

CVE-2015-6506: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

National Science Foundation Internet of Things Security Grants

The National Science Foundation announced on Friday that it has awarded $6 million in grants to fund projects working toward securing networked things. The grants are part of a partnership with Intel Corp., and were awarded to separate projects at Stanford University and the University of...

Debian DLA-303-1 : openjdk-6 security update (Bar Mitzvah) (Logjam)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. For Debian 6 'Squeeze', these issues have been...

DLA-303-1 openjdk-6 - security update

Bulletin has no description...

Debian DSA-3339-1 : openjdk-6 - security update (Bar Mitzvah) (Logjam)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 3339-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3339-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 19, 2015 https://www.debian.org/security/faq -...

DSA-3339-1 openjdk-6 - security update

Bulletin has no description...

Debian Security Advisory DSA 3339-1 (openjdk-6 - security update)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. OpenVAS Vulnerability Test $Id: deb3339.nasl 660...

Cisco Adaptive Security Appliance MITM

The vulnerability of the Cisco Adaptive Security Appliance’s TLS implementation is due to problems with the use of cryptography. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...

Java Platform JRockit Information Disclosure

The vulnerability of the JCE component in Java Platform and JRockit programming platforms is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality of information...

[SECURITY] [DSA 3336-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3336-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3336-1 (nss - security update)

Several vulnerabilities have been discovered in nss, the Mozilla Network Security Service library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-2721 Karthikeyan Bhargavan discovered that NSS incorrectly handles state transitions for the TLS state...

DSA-3336-1 nss - security update

Bulletin has no description...

Debian DSA-3335-1 : request-tracker4 - security update

It was discovered that Request Tracker, an extensible trouble-ticket tracking system is susceptible to a cross-site scripting attack via the user and group rights management pages CVE-2015-5475 and via the cryptography interface, allowing an attacker with a carefully-crafted key to inject...