nexusmods.com XSS vulnerability

Vulnerable URL: http://www.nexusmods.com/skyrim/mods/37994/?navtag=http://www.nexusmods.com/skyrim/ajax/comments/?modid=3799456349'...

CVE-2016-4459

Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9...

Stack overflow

Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9...

httpd: DoS vulnerability in mod_auth_digest

It was discovered that the modauthdigest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication...

PT-2017-9023

Name of the Vulnerable Software and Affected Versions Apache Tomcat Connectors mod jk versions prior to 1.2.42 Description A buffer overflow issue has been identified. Recommendations For versions prior to 1.2.42, update to version 1.2.42 or later to resolve the issue...

PT-2017-8495

Name of the Vulnerable Software and Affected Versions mod cluster version 1.2.9 Description A stack-based buffer overflow issue exists in the native/mod manager/node.c file of mod cluster. Recommendations For mod cluster version 1.2.9, update to a version that contains a fix for this issue...

PT-2017-16869 · Ping Identity +2 · Mod Auth Openidc +2

Name of the Vulnerable Software and Affected Versions: mod auth openidc versions prior to 2.14 Description: The issue allows remote attackers to spoof page content via a malicious URL provided to the user, which triggers an invalid request. This occurs due to a flaw in the Mod auth openidc.c...

PT-2018-4923

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.0 through 2.2.31 Apache HTTP Server versions 2.4.1 through 2.4.23 Description The issue allows for possible CRLF injection, enabling HTTP response splitting attacks for sites using mod userdir. This was mitigate...

CVE-2017-6181

The CVE-2017-6181 entry corresponds to an unbounded recursion flaw in the Onigmo (Oniguruma-mod) regular expression library’s parse_char_class function (regparse.c) used by Ruby 2.4.0. A crafted regular expression can cause a remote attacker to trigger deep recursion and a potential application c...

DEBIAN-CVE-2017-6807

modauthmellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site...

CVE-2016-9407

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...

CVE-2016-9408

Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...

CVE-2016-9408

Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...

CVE-2016-9407

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...

CVE-2016-9407

Summary of CVE-2016-9407 : A cross-site scripting (XSS) vulnerability in MyBB (My Bulletin Board) prior to version 1.8.7 and in MyBB Merge System prior to 1.8.7. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs. Affected compone...

CVE-2016-9408

CVE-2016-9408 is an XSS vulnerability in the MyBB Mod control panel (and MyBB Merge System) prior to 1.8.7. The issue allows remote attackers to inject arbitrary web script/HTML via vectors involving editing users. Affected software: MyBB (MyBulletinBoard) up to version 1.8.7. Root cause details ...

CVE-2016-9408

Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...

CVE-2016-9407

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...