CVE-2014-4768

IBM Unified Extensible Firmware Interface UEFI on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode...

CVE-2014-4768

The CVE-2014-4768 issue affects IBM UEFI on Flex System x880 X6 and System x3850/x3950 X6, enabling a privileged user to configure legacy boot mode that causes a temporary denial of service. Affected firmware levels and MTMs are listed in IBM’s Security Bulletin: for x880 X6 MTM 4259/7903, ibm_fw...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...

Adobe/Apache Flex ASDoc Tool XSS

The remote web server contains one or more HTML documents created with an unpatched version of the Adobe/Apache Flex ASDoc tool that is potentially affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Reflected Cross-Site Scripting vulnerability in asdoc generated documentation

------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in asdoc generated documentation ------------------------------------------------------------------------ Radjnies Bhansingh, March 2014...

Reflected Cross-Site Scripting vulnerability in asdoc generated documentation

------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in asdoc generated documentation ------------------------------------------------------------------------ Radjnies Bhansingh, March 2014...

CVE-2015-1773 Apache Flex reflected XSS vulnerability

CVE-2015-1773 Apache Flex reflected XSS vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: All versions of Apache Flex before 4.14.1 Description: The asdoc tool produced JavaScript code that was vulnerable to a reflected XSS attack. A request with a specially...

Grindr Account System - Auth Bypass Vulnerability

Document Title: =============== Grindr Account System - Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1487 Video: https://www.youtube.com/watch?v=7WTLJ2d06kM Advisory1: http://www.vulnerability-lab.com/getcontent.php?id=1419 Advisory2:...

Microsoft patch day 2015-4-14: the repair of many high-risk IE, Windows, Office vulnerabilities-vulnerability warning-the black bar safety net

Monthly the second Tuesday, Microsoft fixed the patch to fix the day, Microsoft on Tuesday（2015-4-14 the“patch day”on repairing a large number of vulnerabilities, which includes many IE, Windows, Office, high-risk vulnerabilities. Update announcement MS15-0 3 4 announcement MS15-0 3 4 announcemen...

Adobe Releases Security Updates for Flash Player, ColdFusion, and Flex

Adobe has released three security updates to address multiple vulnerabilities in Flash Player, ColdFusion, and Flex. Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system, or lead to a reflected cross-site scripting attack. Users and...

APSB15-08 Security bulletin available for Adobe Flex

An important vulnerability has been identified in the JavaScript output of the ASDoc tool available in Adobe Flex 4.6 and earlier versions. This vulnerability could lead to reflected cross-site scripting. Adobe recommends users perform the actions referenced in the "Solutions" section below to...

VMware Horizon View Multiple Vulnerabilities (VMSA-2015-0003) (VMSA-2015-0008) (POODLE)

The VMware Horizon View installed on the remote Windows host is version 5.x prior to 5.3.4 or version 6.x prior to 6.1. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0...

Apache Flex Cross-Site Scripting Vulnerability

Apache Flex is the United States Apache Apache Software Foundation, a set of open source framework for creating Web and mobile applications. A cross-site scripting vulnerability exists in the asdoc/templates/index.html file in Apache Flex versions prior to 4.14.1. A remote attacker can exploit th...

CVE-2015-1773

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...

Cross site scripting

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...

CVE-2015-1773

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...

CVE-2015-1773

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...

CVE-2015-1773

CVE-2015-1773 affects the Apache Flex ASDoc tool. The vulnerability exists in the output HTML generated by asdoc/templates/index.html, where a crafted URI can cause JavaScript code generated by the asdoc component to execute, yielding a reflected XSS. Affected versions are Apache Flex before 4.14...

CVE-2 0 1 1-2 4 6 1 principles of analysis and case studies-vulnerability and early warning-the black bar safety net

0x00 vulnerability background From the CVE numbers it can be seen that this vulnerability has been for some years 1。 Because this vulnerability occurs in the Flex SDK, rather than the Flash Player. So for developers, as long as they used to have the defects of the Flex SDK to compile FLASH, then ...

Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net

A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...