Xen PV Virtual Machine Denial of Service Vulnerability

Xen is an open source virtual machine monitor product. A security vulnerability in Xen's PV virtual machines when hugetlbfs support is enabled allows attackers to exploit the vulnerability to trigger an infinite loop of error pages for denial-of-service attacks...

How to Display Custom Error Pages by Using NetScaler Responder Policies

This article contains information about configuring Responder policies that redirect user requests to custom error pages during a maintenance period of a back end web server farm. Background You can create custom error page and redirect the user requests to it. For example, you might want to host...

MediaWiki cross-site scripting vulnerability (CNVD-2015-05878)

MediaWiki is a free, free web-based wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from a cross-site scripting vulnerability that allows remote...

UBUNTU-CVE-2015-3175

Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer...

CVE-2012-5508

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...

Design/Logic Flaw

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...

PYSEC-2014-50

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...

CVE-2012-5508

CVE-2012-5508 (and related CVE-2012-6661) affects Zope before 2.13.19 used with Plone older than 4.2.3 and Plone 4.3 beta1. Root cause: PRNG not reseeded, enabling remote attackers to infer PRNG state and potentially abuse password resets via unspecified vectors. Mitigation: upgrade to Zope 2.13....

CVE-2012-5508: Exposure of Sensitive Information to an Unauthorized Actor

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...

Python 2.2/2.3 Documentation Server Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7353/info It has been reported that the Python Documentation Server is vulnerable to a cross-site scripting problem in error pages. Because of this, an attacker could potentially cause the execution of malicious HTML and...

Imatix Xitami 2.5 GSL Template Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5025/info Imatix Xitami is a webserver for Microsoft Windows operating systems. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. Xitami fails to check URLs for...

Gattaca Server 2003 Null Byte Path Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error...

Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8207/info ISA server will output certain error pages when requests that are invalid, for whatever reason, are transmitted through it. These error pages will appear in the context of the domain that the request was made fo...

Cherokee 0.1.x/0.2.x/0.4.x Error Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9496/info Cherokee has been reported to contain a cross-site scripting vulnerability via error pages. An attacker can exploit this issue by crafting a URI link containing the malevolent HTML or script code, and enticing a...

Gattaca Server 2003 Language Variable Path Exposure

No description provided by source. source: http://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error...

YaBB 1 Invalid Topic Error Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. YaBB fails to check URLs for the presence of script commands when generating error pages,...

ACME Labs thttpd 2.20 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported in some...

http-errors NSE Script

This script crawls through the website and returns any error pages. The script will return all pages sorted by error code that respond with an http code equal or above 400. To change this behaviour, please use the errcodes option. The script, by default, spiders and searches within forty pages. F...

Opera - security update to 12.11 (important)

Opera 12.11 is a recommended upgrade offering security and stability enhancements: -fixed an issue where HTTP response heap buffer overflow could allow execution of arbitrary code; -fixed an issue where error pages could be used to guess local file paths; see our advisory -fixed several issues...

Opera Multiple Vulnerabilities-02 (Jan 2013) - Windows

Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...