Apache ActiveMQ Cross Site Scripting

Vulnerability Info: 26/04/2010 Issue Discovered 26/04/2010 Vendor Notified 27/04/2010 Vendor Conformed Class: Cross-Site Scripting Input validation Severity: Medium Overview: --------- Apache ActiveMQ is prone to cross-site scripting vulnerability. Technical Description: ---------------------- Th...

Apache ActiveMQ XSS Vulnerability

Vulnerability Info: 26/04/2010 Issue Discovered 26/04/2010 Vendor Notified 27/04/2010 Vendor Conformed Class: Cross-Site Scripting Input validation Severity: Medium Overview: --------- Apache ActiveMQ is prone to cross-site scripting vulnerability. Technical Description: ---------------------- Th...

Security Update for Helix Server and Helix Mobile Server

Updated April 14, 2010 RealNetworks is making available product upgrades that contain security bug fixes. RealNetworks, Inc. has addressed three recently discovered security vulnerabilities. RealNetworks takes all security vulnerabilities extremely seriously and provides this information as an ai...

AIX 610004 : U831622

The remote host is missing AIX PTF U831622 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610003 : U831215

The remote host is missing AIX PTF U831215 which is related to the security of the package bos.rte.tty You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U831099

The remote host is missing AIX PTF U831099 which is related to the security of the package devices.pci.14106802.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Debian Security Advisory DSA 2028-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 2028-1. OpenVAS Vulnerability Test $Id: deb20281.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2028-1 xpdf Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

HP Operations Manager <= v8.16 - (srcvw4.dll) Unicode Stack Overflow

Exploit for windows platform in category dos / poc ===================================================================================================== HP Operations Manager !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Almas Inc. Compiere J300A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1333

Multiple cross-site scripting XSS vulnerabilities in Almas Inc. Compiere J300A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1333

CVE-2010-1333 describes cross-site scripting (XSS) vulnerabilities in Compiere by Almas Inc., affecting J300_A02 and earlier. Public records (JVN/JVNDB entries) state that when a user is logged into Compiere, an arbitrary script may be executed in the user’s browser. The root cause is an XSS flaw...

CVE-2010-1333

Multiple cross-site scripting XSS vulnerabilities in Almas Inc. Compiere J300A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Compiere vulnerable to cross-site scripting

Overview Compiere provided by Almas Inc. contains a cross-site scripting vulnerability. Compiere provided by Almas Inc. is an Enterprise Resource Planning ERP and Customer Relationship Management CRM software. Compiere contains a cross-site scripting vulnerability. This vulnerability is different...

JVN#38687002 Compiere vulnerable to cross-site scripting

Compiere provided by Almas Inc. is an Enterprise Resource Planning ERP and Customer Relationship Management CRM software. Compiere contains a cross-site scripting vulnerability. This vulnerability is different from JVN57963254. Impact An arbitrary script may be executed on the user's web browser...

Elevation of Privilege Vulnerability in iTunes for Windows

Elevation of Privilege Vulnerability in iTunes for Windows ---------------------------------------------------------- March 31th, 2010 ======= Summary ======= Name: Elevation of Privilege Vulnerability in iTunes for Windows Release Date: March 31th, 2010 Discoverer: Jason Geffner Vendor: Apple In...

UltraISO CCD File Parsing Buffer Overflow

$Id: ultraisoccd.rb 8900 2010-03-24 19:35:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

AIX 530009 : U830180

The remote host is missing AIX PTF U830180 which is related to the security of the package bos.altdiskinstall.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

UltraISO CCD File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in EZB Systems, Inc's UltraISO. When processing .CCD files, data is read from file into a fixed-size stack buffer. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by convincing their victim to...

Google Picasa Detection (Windows)

Google Picasa, a photo organizer from Google, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45048; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Google Picas...

Taher Elgamal on Encryption, SSL, The Cloud

In this wide ranging interview, cryptographer, Taher Elgamal, chief security officer of Axway Inc. and initial driving force behind SSL, explains how applications may be better adapted to defend against attacks and how cloud computing may alter data protection and authentication. Read the full...