PT-2015-7116

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 version 3.40AXH.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the LoginPassword or hiddenPassword parameters in the Forms/rpAuth 1 module. Recommendations For ZyXEL P-660HW-T1 versi...

CVE-2015-6016: Undefined Security Weakness

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0, PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors...

UBUNTU-CVE-2015-8803

The ecc256modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...

UBUNTU-CVE-2015-8805

The ecc256modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...

PT-2015-3202

Name of the Vulnerable Software and Affected Versions Nettle versions prior to 3.2 Description The issue is related to the ecc 256 modp function in ecc-256.c, which does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve. Thi...

PT-2015-2964

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 versions 3.40AXH.0 ZyXEL PMG5318-B20A versions 1.00AANC0b5 ZyXEL NBG-418N affected versions not specified Description The issue is related to the use of a default password for the administrator account in the firmware of certa...

e-p-a-p.com XSS vulnerability

Vulnerable URL: http://www.e-p-a-p.com/publications/bookcard.php?isbn=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

CVE-2015-7783

Cross-site scripting XSS vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7783

Cross-site scripting XSS vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7783

The CVE-2015-7783 entry refers to a stored cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS prior to version 4.10. The confirmed detail across connected records indicates CWE-79-style XSS that could allow an attacker to inject arbitrary script or HTML via unspecified vectors, potenti...

CVE-2015-7783: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-7606

Name of the Vulnerable Software and Affected Versions Let's PHP! p++BBS versions prior to 4.10 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20151208)

It was found that the x86 ISA Instruction Set Architecture is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way sequential delivering of benign exceptions such as AC alignment check exception and DB debug exception...

CentOS 7 : kernel (CESA-2015:2552)

Updated kernel packages that fix two security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

RHEL 7 : kernel (RHSA-2015:2552)

Updated kernel packages that fix two security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

DEBIAN-CVE-2015-1794

The ssl3getkeyexchange function in ssl/s3clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service segmentation fault via a zero p value in an anonymous Diffie-Hellman DH ServerKeyExchange message...

OpenSSL ServerKeyExchange Message Handling Remote Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL for strong encryption of network communications. A security vulnerability exists in OpenSSL, where a remote attacker submitting a special anonymous DH encryption suite of ServerKeyExchange messages can crash the target service if the p-value is set ...

p++BBS vulnerable to cross-site scripting

Overview p++BBS provided by Let's PHP! contains a stored cross-site scripting vulnerability CWE-79. Koki Takahashi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on the...

JVN#72891124: p++BBS vulnerable to cross-site scripting

p++BBS provided by Let's PHP! contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply an Update Update to the latest version according to the information provided by the developer. Products Affected p++BBS...