WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58135/info The Smart Flv plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

Photodex ProShow Producer - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/58131/info Photodex ProShow Producer is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a customized library file from application pat...

File Manager - HTML Injection Local File Inclusion

File Manager - HTML Injection Local File Inclusion source: https://www.securityfocus.com/bid/58313/info File Manager is prone to an HTML-injection vulnerability and a local file-include vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of t...

ZeroClipboard 1.9.x - id Cross-Site Scripting

ZeroClipboard 1.9.x - id Cross-Site Scripting source: https://www.securityfocus.com/bid/58116/info ZeroClipboard is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

ZenPhoto - index.php SQL Injection

ZenPhoto - index.php SQL Injection source: https://www.securityfocus.com/bid/58078/info Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities

Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/57949/info The Dell SonicWALL Scrutinizer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)

This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress Plugin Wysija Newsletters - Multiple SQL Injections

WordPress Plugin Wysija Newsletters - Multiple SQL Injections source: https://www.securityfocus.com/bid/57775/info The Wysija Newsletters Plugin for WordPress is prone to multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to compromise the application, access ...

Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities

Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/57657/info Novell Groupwise Client is prone to multiple remote code-execution vulnerabilities. A remote attacker can leverage this issue to execute arbitrary code within the...

Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57514/info Perforce P4Web is prone to multiple cross site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WordPress Plugin Gallery - 'filename_1' Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info The Gallery plugin for WordPress is prone to an arbitrary file-access vulnerability. Remote attackers can exploit this issue to read arbitrary files. This may lead to further attacks. Gallery 3.8.3 is vulnerable; other versions may also be...

TinyBrowser - edit.php Directory Listing

TinyBrowser - edit.php Directory Listing source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an unsuspecting...

Samsung Kies - Remote Buffer Overflow

Samsung Kies - Remote Buffer Overflow source: https://www.securityfocus.com/bid/57249/info Samsung Kies is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer. Attackers can exploit this issue to...

Quick.CMS Quick.Cart - Cross-Site Scripting

Quick.CMS Quick.Cart - Cross-Site Scripting source: https://www.securityfocus.com/bid/57254/info Quick.Cms and Quick.Cart are prone to a cross-site scripting vulnerability because they fail to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Facebook for Android - 'LoginActivity' Information Disclosure

source: https://www.securityfocus.com/bid/57173/info Facebook for Android is prone to an information-disclosure vulnerability. Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks. Facebook for Android 1.8.1 is vulnerable;...

Invision Power Services Invision Gallery 1.0.1 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications source: http://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient...

Novell iPrint Client < 5.82 Remote Code Execution

The version of Novell iPrint Client installed on the remote host is earlier than 5.82. Such versions are affected by an unspecified remote code execution vulnerability that can be triggered via an 'op-client- interface-version' action. C Tenable Network Security, Inc. include"compat.inc"; if...

Hero Framework - userslogin Username Cross-Site Scripting

Hero Framework - userslogin Username Cross-Site Scripting source: https://www.securityfocus.com/bid/57035/info Hero is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script...

WordPress SEO Plugin 1.3.11 Cross Site Script Vulnerability

WordPress out of the box is already technically quite a good platform for SEO, this was true when I wrote my original WordPress SEO article in 2008 and it's still true today, but that doesn't mean you can't improve it further! This plugin is written from the ground up by WordPress SEO consultant...