EUVD-2019-2488

Malware in sbrugna...

CVE-2019-10694

The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and...

CVE-2019-10694

CVE-2019-10694 affects Puppet Enterprise where the Express install could leave an overlooked default password for the admin user if the user did not use the URL provided to set the password. The issue is resolved in Puppet Enterprise 2019.0.3 and in 2018.1.9. The public descriptions consistently ...

Adobe Flex SDK 3.x 'index.template.html' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execu...

CVE-2009-1879

Cross-site scripting XSS vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or HTML via the query...

CVE-2009-1879

The CVE-2009-1879 item covers a DOM-based XSS in Adobe Flex SDK’s express-install template index.template.html, affecting Flex SDK prior to 3.4 when the installed Flash version is older than a specified requiredMajorVersion. A remote attacker can inject arbitrary script via the query string. Open...

Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execute arbitrary script code in the...

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit...