69 matches found
CVE-2012-4397
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 calendar displayname to part.choosecalendar.rowfields.php or 2 part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or 3 unspecified...
Multiple stored XSS - ownCloud
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the calendar displayname to part.choosecalendar.rowfields.php part.choosecalendar.rowfields.shared.php in apps/calendar/templates/ unspecified vectors to...
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
This host is installed with Subtitle Translation Wizard and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsubtitletranslationwizardbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability Authors:...
Orca Browser Version Detection
This script detects the installed version of Orca Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gborcabrowserdetect.nasl 7332 2017-09-29 14:16:56Z cfischer $ Orca Browser Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2008-1775
Cross-site scripting XSS vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...
CVE-2008-1775
Cross-site scripting XSS vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...
CVE-2008-1775: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...
CVE-2006-6063: Undefined Security Weakness
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long 1 FileName, and cause a crash via a long 2 DisplayName...
CVE-2006-2667: Undefined Security Weakness
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in 1 wp-content/cache/userlogins/ 2...