Lucene search
+L

5216 matches found

NVD
NVD
added 2012/09/28 3:55 p.m.23 views

CVE-2012-0956

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...

6.8CVSS6.7AI score0.01201EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2012/09/28 3:0 p.m.33 views

CVE-2012-0956

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...

6.7AI score0.01201EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.36 views

Ubuntu Update for ubiquity-slideshow-ubuntu USN-1561-1

Ubuntu Update for Linux kernel vulnerabilities USN-1561-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15611.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubiquity-slideshow-ubuntu USN-1561-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

6.8CVSS0.01201EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/09/11 12:0 a.m.26 views

Ubuntu 12.04 LTS : ubiquity-slideshow-ubuntu vulnerability (USN-1561-1)

Paul Mutton discovered that ubiquity-slideshow-ubuntu incorrectly handled the Twitter feed displayed during system installation. A remote attacker could use this flaw to inject code into the Twitter feed and read arbitrary files off the filesystem during system installation. This flaw has been...

6.8CVSS5.7AI score0.01201EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2012/09/10 1:53 p.m.73 views

USN-1561-1: ubiquity-slideshow-ubuntu vulnerability

Paul Mutton discovered that ubiquity-slideshow-ubuntu incorrectly handled the Twitter feed displayed during system installation. A remote attacker could use this flaw to inject code into the Twitter feed and read arbitrary files off the filesystem during system installation. This flaw has been...

6.8CVSS5.5AI score0.01201EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2012/09/10 12:0 a.m.32 views

CVE-2012-0956

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...

6.8CVSS6.1AI score0.01201EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.20 views

Fedora Update for python-feedparser FEDORA-2012-8291

Check for the Version of python-feedparser OpenVAS Vulnerability Test Fedora Update for python-feedparser FEDORA-2012-8291 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

5CVSS6.4AI score0.02775EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2012/08/26 12:0 a.m.23 views

Joomla Komento SQL Injection

Exploit Title: Joomla component komento Sql Inection Vulnerability Google Dork:inurl:component/komento/ Date: 08/24/2012 Author: Crim3R Vendor Home : http://stackideas.com/komento.html Tested on: all $ $ Author will be not responsible for any damage. $ ========================================...

0.5AI score
SaveExploits0
zdt
zdt
added 2012/08/24 12:0 a.m.28 views

Joomla Component com_komento Sql injection vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component komento Sql Inection Vulnerability Google Dork:inurl:component/komento/ Date: 08/24/2012 Author: Crim3R Vendor Home : http://stackideas.com/komento.html Tested on: all $ $ Author will be not responsible for any...

7.1AI score
SaveExploits0
NVD
NVD
added 2012/08/15 9:55 p.m.18 views

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

5CVSS6.4AI score0.01362EPSS
SaveExploits0References4
Prion
Prion
added 2012/08/15 9:55 p.m.13 views

Design/Logic Flaw

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

5CVSS7AI score0.01362EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2012/08/15 9:55 p.m.23 views

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

5CVSS5.9AI score0.01362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2012/08/15 9:0 p.m.27 views

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

6.3AI score0.01362EPSS
SaveExploits0References4
CVE
CVE
added 2012/08/15 9:0 p.m.45 views

CVE-2012-2770

The CVE-2012-2770 entry concerns the Authen::ExternalAuth extension (pre-0.11) for Best Practical Solutions RT, where remote attackers could obtain a logged-in session via unspecified vectors related to the user’s RSS feed URL. Public references describe the issue similarly. Remediation is availa...

5CVSS6.4AI score0.01362EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.33 views

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20120131)

Mozilla Thunderbird is a standalone mail and newsgroup client. A use-after-free flaw was found in the way Thunderbird removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicious script could possibly use this flaw to cause...

9.3CVSS8.6AI score0.36649EPSS
SaveExploits10References5
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.54 views

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120424)

Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in Sanitiser for OpenType OTS, used by Thunderbird to help prevent potential exploits in malformed OpenType fonts. Malicious content could cause Thunderbird to crash or, under certain conditions, possibly execute...

10CVSS8.3AI score0.10372EPSS
SaveExploits2References12
OPENSUSE Linux
OPENSUSE Linux
added 2012/07/30 5:8 p.m.50 views

xulrunner to 14.0.1 (critical)

Mozilla XULRunner was updated to 14.0.1, fixing bugs and security issues: Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed eviden...

10CVSS0.5AI score0.05593EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.58 views

CentOS Update for thunderbird CESA-2012:0516 centos6

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:0516 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

10CVSS0.4AI score0.10372EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.48 views

CentOS Update for thunderbird CESA-2012:0516 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS8.5AI score0.10372EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.41 views

CentOS Update for thunderbird CESA-2012:0516 centos5

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:0516 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

10CVSS0.4AI score0.10372EPSS
SaveExploits2References2
Rows per page
Query Builder