XSS in page renderer

An XSS vulnerability has been identified in the page renderer. This issue provides a fix for this problem. The severity of this issue is rated HIGH. Please see http://confluence.atlassian.com/x/ZILmD for other security related issues as well as more information on how we rate issues...

JVN#60969543 HL-SiteManager vulnerable to SQL injection

HL-SiteManager from Heartlogic is a contents management system CMS software. HL-SiteManager contains a SQL injection vulnerability. Impact A remote attacker may view or modify information stored by the product. Solution Do not use HL-SiteManager As patches will not be provided, users are...

CVE-2010-0736

Cross-site scripting XSS vulnerability in the viewqueryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."...

CVE-2010-0736

Removed by vendor...

Debian DSA-1979-1 : lintian - multiple vulnerabilities

Multiple vulnerabilities have been discovered in lintian, a Debian package checker. The following Common Vulnerabilities and Exposures project ids have been assigned to identify them : - CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using...

CVE-2010-0349

CVE-2010-0349 concerns the WebCalenderC3 web calendar from C3 Corp. A cross-site scripting (XSS) flaw exists in WebCalenderC3 v0.32 and earlier, with the vendor unable to reproduce it but a patch/security-enhanced version was released. The vulnerability may allow arbitrary script execution in a u...

Millenium MP3 Studio 2.0 mpf file BoF

No description provided by source. + Vulnerability : .mpf File Local Stack Overflow Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2/SP3 En + Written by...

SLES9: Security update for Tk

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tk-devel tk For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010158 within the...

jetAudio v 7.1.9.4030 plus vx (.m3u ) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit (update)

Exploit for unknown platform in category local exploits ======================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit update ======================================================================== + Vulnerability : .m3u...

PHPMesFilms 1.0 - 'index.php?id' SQL Injection

in the name of God Download script : http://www.script-masters.com/home/download.php?script=138 ---------------------------------------------------------- Discovered By: SuB-ZeRofrom algeria msn: [email protected] D-unit : SuB-ZeRo & Me!sTer & HaLokA Home: www.dz-security.net/ my exploit :...

PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Design/Logic Flaw

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

CVE-2008-5318

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

CVE-2008-5318

CVE-2008-5318 affects Tiki Wiki CMS Groupware prior to 2.2; the issue is described as an input sanitation weakness related to the size of user-provided input. Exploitation details and exact impact are not provided in the CVE description, but a public NES/OPENVAS entry classifies it as an input sa...

CVE-2008-5318

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

Fixed in Apache Tomcat 5.5.27

Low: Cross-site scripting CVE-2008-1232 The message argument of HttpServletResponse.sendError call is not only displayed on the error page, but is also used for the reason-phrase of HTTP response. This may include characters that are illegal in HTTP headers. It is possible for a specially crafted...

Debian DSA-1592-1 : linux-2.6 - heap overflow

Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1673 Wei Wang from McAfee reported a potential heap overflow in the ASN.1...

[SECURITY] Fedora 7 Update: xfce4-weather-plugin-0.6.2-2.fc7

A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...

[Full-disclosure] firefox 2.0.0.2 crash

Can be dupe but in fast browsing over topics I did not discovered this exploit: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif I do NOT know anything else than this url. Just seen it in random discussion and anyone else I asked knows nothing. Current tests indicate that...