Reflected XSS within the username parameter of the /user/non-system/{username} rest resource

The confluence-rest-plugin has a rest resource to look up "non-system" users which takes in a username. If given username supplied is not found then it is included in an xml error message without being xml encoded and thus is a XSS vector. That is, and other such xml special characters are not...

Ubuntu Update for dovecot vulnerability USN-487-1

Ubuntu Update for Linux kernel vulnerabilities USN-487-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4871.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dovecot vulnerability USN-487-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...