16 matches found
EUVD-2009-4042
Malware in sbrugna...
EUVD-2021-10329
Malware in sbrugna...
EUVD-2023-1045
Malicious code in bioql PyPI...
EUVD-2025-9027
Malicious code in bioql PyPI...
EUVD-2025-8413
Malicious code in bioql PyPI...
CVE-2023-27898
Jenkins 2.270 through 2.393 both inclusive, LTS 2.277.1 through 2.375.3 both inclusive does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting XSS...
zeek -- Various vulnerabilities
Jon Siwek of Corelight reports: This release fixes the following security issues: Fix buffer over-read in Ident analyzer Fix SSL scripting error leading to uninitialized field access and memory leak Fix POP3 analyzer global buffer over-read Fix potential stack overflows due to use of...
Salesforce Woes Linger as Admins Clean Up After Service Outage
After a massive service outage on Friday, software-as-a-service giant Salesforce restored partial access to its affected customers over the weekend, while admins continued with cleanup into Monday. The outage was brought on by a scripting error that affected all Pardot marketing automation softwa...
March 12, 2019—KB4489881 (Monthly Rollup)
March 12, 2019—KB4489881 Monthly Rollup Applications that do not have a manifest that indicates the correct Windows version of 6.3 may receive the scripting error, “Intl is not available”. Ensure that the applications have a manifest with the appropriate Windows version. For more information, see...
Mozilla Firefox < 27.0 Multiple Vulnerabilities
Binary data 8098.prm...
Opera Information Disclosure and Unspecified Vulnerabilities - (Linux)
The host is installed with Opera Web Browser and is prone to Information Disclosure and other unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperainfodiscunspecifiedvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Information Disclosure and Unspecified Vulnerabilities -...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
Important: Red Hat Security Advisory: apache security update for Stronghold
An updated version of Apache that addresses several security issues is now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP server is a powerful, full-featured, efficient, and...
thttpd < 2.21 Error Page XSS
Binary data 2123.prm...
Imatix Xitami 2.5 - GSL Template Cross-Site Scripting
Imatix Xitami 2.5 - GSL Template Cross-Site Scripting source: https://www.securityfocus.com/bid/5025/info Imatix Xitami is a webserver for Microsoft Windows operating systems. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. Xitami fail...
Taskpads ActiveX Control incorrectly marked safe-for-scripting
Overview The taskpads ActiveX control included with some resource kit products circa February 1999 was incorrectly marked safe-for-scripting. Description The taskpads ActiveX control included with the Microsoft Windows 98 resource kit, the Microsoft Windows 98 resource kit sampler, and the Back...