Lucene search
+L

2818 matches found

Mend
Mend
•added 2013/08/17 4:00 p.m.•3 views

CVE-2013-2022

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

6.3CVSS0.02735EPSS
SaveExploits1References12
CVE
CVE
•added 2013/08/17 4:00 p.m.•85 views

CVE-2013-2022

CVE-2013-2022 refers to multiple XSS vulnerabilities in the Flash SWF component jplayer.swf (jPlayer) within actionscript/Jplayer.as. Affected are jPlayer versions before 2.2.23, where remote attackers could inject arbitrary script or HTML via the (1) jQuery or (2) id parameters in the jplayer.sw...

4.3CVSS5.7AI score0.02735EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/17 12:00 a.m.•6 views

CVE-2013-2022: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

4.3CVSS6AI score0.02735EPSS
SaveExploits1References2
Prion
Prion
•added 2013/08/15 5:55 p.m.•37 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id...

4.3CVSS5.8AI score0.05494EPSS
SaveExploits4References8Affected Software2
UbuntuCve
UbuntuCve
•added 2013/08/15 5:55 p.m.•44 views

CVE-2013-1942

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id...

4.3CVSS5.9AI score0.05494EPSS
SaveExploits3References3
Mend
Mend
•added 2013/08/15 5:00 p.m.•2 views

CVE-2013-1942

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id...

6.3CVSS0.05494EPSS
SaveExploits3References8
Debian CVE
Debian CVE
•added 2013/08/15 5:00 p.m.•85 views

CVE-2013-1942

Removed by vendor...

4.3CVSS6.6AI score0.05494EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/15 12:00 a.m.•5 views

CVE-2013-1942: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id...

4.3CVSS5.9AI score0.05494EPSS
SaveExploits3References2
Prion
Prion
•added 2013/06/20 11:55 p.m.•14 views

Sql injection

SQL injection vulnerability in the jQuery autocomplete for indexedsearch rzautocomplete extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9.1AI score0.01352EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2013/06/20 11:55 p.m.•26 views

CVE-2013-4634

SQL injection vulnerability in the jQuery autocomplete for indexedsearch rzautocomplete extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS8.4AI score0.01352EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2013/06/20 11:00 p.m.•33 views

CVE-2013-4634

SQL injection vulnerability in the jQuery autocomplete for indexedsearch rzautocomplete extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.4AI score0.01352EPSS
SaveExploits0References6
CVE
CVE
•added 2013/06/20 11:00 p.m.•52 views

CVE-2013-4634

Summary: TYPO3’s jQuery autocomplete for indexed_search (rzautocomplete) extension is vulnerable to SQL injection in all versions before 0.0.9, as described in CVE-2013-4634. Impact: Remote attackers could execute arbitrary SQL commands via unspecified vectors. Affected component: rzautocomplete ...

7.5CVSS8.7AI score0.01352EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/06/20 12:00 a.m.•3 views

CVE-2013-4634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jQuery autocomplete for indexedsearch rzautocomplete extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS6.4AI score0.01352EPSS
SaveExploits0References2
appercut
appercut
•added 2013/06/18 12:00 a.m.•609 views

PHP-Fusion: source code security analysis report

Several vulnerabilities were discovered in PHP-Fusion 'PHP-Fusion' software: Incorrect User Input Filtration when Connecting to External Files File System Path Manipulation Incorrect User Input Filtration when Using Regular Expressions while Calling the pregreplace Function Using Insufficiently...

0.9AI score
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•17 views

Fedora Update for python-tw2-jquery FEDORA-2013-1286

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•9 views

Fedora Update for python-tw2-jquery FEDORA-2013-1277

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•16 views

Fedora Update for python-tw2-jquery FEDORA-2013-1286

Check for the Version of python-tw2-jquery OpenVAS Vulnerability Test Fedora Update for python-tw2-jquery FEDORA-2013-1286 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/03/12 12:00 a.m.•15 views

Fedora Update for python-tw2-jquery FEDORA-2013-1277

Check for the Version of python-tw2-jquery OpenVAS Vulnerability Test Fedora Update for python-tw2-jquery FEDORA-2013-1277 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/03/10 12:00 a.m.•27 views

Fedora 17 : python-tw2-jquery-2.0.3-5.fc17 (2013-1286)

Remove old bundled versions of jquery. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

5.4AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2013/03/10 12:00 a.m.•17 views

Fedora 18 : python-tw2-jquery-2.0.3-5.fc18 (2013-1277)

Remove old bundled versions of jquery. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

5.4AI score
SaveExploits0References3
Rows per page
Query Builder