Oracle MySQL DELETE Heap Buffer Overflow (CVE-2012-5612)

A heap buffer overflow vulnerability exists in MySQL database server. The vulnerability is due to an error while parsing the DELETE command. Successful exploitation could result in execution of arbitrary code within the security context of the MySQL service...

Carefully timed redirects can allow cross site scripting

Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed redirects can cause scripts to execute in the wrong security context in Opera. This allows cross site scripting XSS...

Carefully timed redirects can allow cross site scripting – Opera Security Advisories

Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed redirects can cause scripts to execute in the wrong security context in Opera. This allows cross site scripting XSS...

Slideshow Plugin for WordPress 'settings.php' Multiple Parameter XSS

The version of Slideshow Plugin for WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'settings' and 'inputFields' parameters of the 'settings.php' script before using them to generate dynamic HTML output. An attacker can leverage these issues to inject...

CVE-2011-2731

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

Zenphoto Verisign_logon.php redirect Parameter XSS

The version of Zenphoto installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'redirect' parameter of the 'zp-core/zp-extensions/federatedlogon/Verisignlogon.php' script. An attacker may be able to leverage this...

HP Diagnostics magentservice.exe Stack Buffer Overflow

A buffer overflow vulnerability has been reported in the HP Diagnostics Server. The vulnerability is due to lack of boundary checking while copying user-supplied data into a stack buffer. A remote attacker can exploit this issue by sending a malicious message to the target. Successful exploitatio...

CheckPoint/Sofaware Firewall - Multiple Vulnerabilities

ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vendor informed: 20th July 2011 Vulnerability fixed: 16th...

Poweradmin index.php XSS

The Poweradmin install hosted on the remote web server is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input appended to the URL of the 'index.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user'...

LogAnalyzer index.php 'filter' Parameter XSS

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input to the 'filter' parameter of the 'index.php' script. An attacker can exploit this issue to inject arbitrary HTML and script code into a user...

LogAnalyzer index.php 'highlight' Parameter XSS

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input to the 'highlight' parameter of the 'index.php' script. An attacker can exploit this issue to inject arbitrary HTML and script code into a...

SquidClamav clwarn.cgi url Parameter XSS

The version of SquidClamav installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'url' parameter of the 'clwarn.cgi' script. An attacker may leverage this issue to execute arbitrary script in the browser o...

CVE-2012-1581

MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users. Any extension developers using mtrand to generate random numbers in contexts where security is require...

Apple QuickTime TeXML Color String Parsing Buffer Overflow (CVE-2012-0663)

A stack buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to insufficient validation of a string length when processing certain elements inside QuickTime TeXML files. A remote attacker can exploit this issue by enticing a target user to open a specially...

Novell iPrint Client ActiveX GetPrinterURLList2 Code Execution (CVE-2011-4185)

A memory corruption vulnerability has been reported in Novell iPrint Client ActiveX control. The vulnerability is due to improper validation of user-supplied string parameters. A remote attacker can exploit this vulnerability by enticing an affected user to open a specially crafted web page...

Microsoft Visio DXF File Parsing Code Execution (MS12-059; CVE-2012-1888)

A remote code execution vulnerability has been report in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Visio fi...

HP Arcsight Logger and Connector appliances cross-site scripting vulnerability

Overview HP's Arcsight Connector appliance v6.2.0.6244.0 and Arcsight Logger appliance v5.2.0.6288.0 and possibly other versions contain a file import facility which is vulnerable to cross-site scripting XSS. Description The supplied facility for importing host data from a file System Admin Tab |...

Microsoft Outlook Exchange Server Cross-Site Scripting (MS05-029; CVE-2005-0563)

A cross-site scripting vulnerability has been reported in the Outlook Web Access component of Exchange Server 5.5. The flaw is caused due to insufficient sanitization of specially crafted email messages. A remote attacker can leverage this flaw to inject and execute script code in the security...

Apache Struts struts-examples upload-submit.do 'theText' Parameter XSS

The remote web server hosts struts-examples, a demonstration application for the Struts framework. Input passed via the 'theText' POST parameter to the 'upload-submit.do' page is not properly sanitized before using it to generate dynamic HTML. By tricking a user into clicking on a specially craft...

Apache Struts struts-cookbook processSimple.do message Parameter XSS

The remote web server hosts struts-cookbook, a demonstration application for the Struts framework. Input passed via the 'message' parameter to the 'processSimple.do' page is not properly sanitized before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted...