CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

CVE-2012-5652

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a 1 RSS feed or 2 search result...

CVE-2012-5652: Exposure of Sensitive Information to an Unauthorized Actor

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a 1 RSS feed or 2 search result...

PT-2013-1823

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 6.27 Description The issue allows remote attackers to obtain sensitive information about uploaded files. This can be achieved via a RSS feed or search result. Recommendations For versions prior to 6.27, update to versi...

CVE-2012-6453

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

Cross site scripting

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

CVE-2012-6453

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

CVE-2012-6453

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

CVE-2012-6453

CVE-2012-6453 affects the RSS Reader extension for MediaWiki prior to version 0.2.6. The vulnerability arises from improper escaping in feed content, allowing remote attackers to inject arbitrary JavaScript/HTML into MediaWiki pages via a crafted feed. Several connected sources (Debian/DSA-2596-1...

PT-2012-6278

Name of the Vulnerable Software and Affected Versions MediaWiki RSS Reader extension versions prior to 0.2.6 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via a crafted feed. Recommendations For versions prior to 0.2.6, update to version...

CVE-2012-6453: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

Microsoft Exchange DoS

Invalid RSS feeds processing...

CVE-2012-4791

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

Security feature bypass

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

CVE-2012-4791

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

MS Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. OpenVAS Vulnerability Test $Id: secpodms12-080.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2784126 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-4791: Improper Control of Generation of Code

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

PT-2012-5593

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2010 SP2 Description A denial of service issue exists due to improper handling of RSS feeds, which could cause the Information Store service to become unresponsive. This condition may lead to...

MS12-080: Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)

The version of Microsoft Exchange installed on the remote host has the following vulnerabilities : - Multiple code execution vulnerabilities in the Oracle Outside In libraries, used by the WebReady Document Viewing feature of Outlook Web App OWA. An attacker could exploit this by sending a...