USN-4002-1 doxygen vulnerability

It was discovered that Doxygen incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code and compromise sensitive information...

openSUSE Security Update : doxygen (openSUSE-2019-1486)

This update for doxygen fixes the following issues : - CVE-2016-10245: Fixed XSS via insufficient sanitization of the query parameter in templates/html/searchopensearch.php boo1136364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DLA-1812-1 : doxygen security update

Insufficient sanitization of the query parameter in searchopensearch.php could lead to reflected cross-site scripting or iframe injection. For Debian 8 'Jessie', this problem has been fixed in version 1.8.8-5+deb8u1. We recommend that you upgrade your doxygen packages. NOTE: Tenable Network...

openSUSE: Security Advisory for doxygen (openSUSE-SU-2019:1486-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for doxygen (moderate)

openSUSE Security Update: Security update for doxygen Announcement ID: openSUSE-SU-2019:1486-1 Rating: moderate References: 1136364 Cross-References: CVE-2016-10245 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for doxygen...

DLA-1812-1 doxygen - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1812-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1812-1] doxygen security update

Package : doxygen Version : 1.8.8-5+deb8u1 CVE ID : CVE-2016-10245 Insufficient sanitization of the query parameter in searchopensearch.php could lead to reflected cross-site scripting or iframe injection. For Debian 8 "Jessie", this problem has been fixed in version 1.8.8-5+deb8u1. We recommend...

Doxygen Cross-Site Scripting Vulnerability

Doxygen is a documentation generator for several programming languages. A cross-site scripting vulnerability exists in the templates/html/searchopensearch.php file in Doxygen. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

AppFusions Doxygen for Atlassian Confluence Cross-Site Scripting Vulnerability

Doxygen is a popular documentation generator and tool for writing software reference documentation. A cross-site scripting vulnerability exists in AppFusions Doxygen for Atlassian Confluence where the parameter file is not filtered in the DoxygenFileServlet.java file. This allows an attacker to...

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Cross-site Scripting CWE-79 Date found: 29/06/2016 Date published: 20/11/2016 CVSSv3 Score: 6.4...

Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal Vulnerability

Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting RCESEC-2016-009 AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent Persistent Cross-Site Scripting RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product:...

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting

RCESEC-2016-009 AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent Persistent Cross-Site Scripting RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com...

Atlassian Confluence AppFusions Doxygen 1.3.x Cross Site Scripting

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Cross-site Scripting CWE-79 Date found: 2016-06-29 Date published: - CVSSv3 Score: 6.4...

Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal

Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found:...

Atlassian Confluence AppFusions Doxygen 1.3.0 Path Traversal

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

Atlassian Confluence AppFusions Doxygen 1.3.x Information Disclosure

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Information Exposure Through an Error Message CWE-209 Date found: 2016-06-29 Date published: - CVSSv3 Score:...

MDVA-2009:240 : doxygen

doxygen was segfaulting while generating HTML documentation and therefore it has been backported from Mandriva Linux 2010.0 that is proven to work. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...