4267 matches found
Atlassian Confluence Cross-Site Scripting Vulnerability
Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. Atlassian Confluence suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious...
WordPress Cross-Site Scripting Vulnerability (CNVD-2016-00258)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. WordPress suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-00162)
IBM Connections is a suite of social software platforms. The platform provides advanced analytics and real-time data monitoring capabilities and accelerates web collaboration within and outside the organization through IBM SmartCloud services. IBM Connections suffers from a cross-site scripting...
Cisco FireSIGHT Management Center Security Mechanism Bypass Vulnerability
Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. A security...
Jenkins Multiple Vulnerabilities (Feb 2014) - Windows
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...
Let's PHP! Frame high-speed chat cross-site scripting vulnerability
Let's PHP! Frame high-speed chat is a chat system from Let's PHP! Let's PHP! Frame high-speed chat suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...
CVE-2015-8124
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id...
CVE-2015-8124
The CVE-2015-8124 vulnerability affects Symfony’s Remember Me feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7, allowing remote attackers to hijack sessions via a session ID. The issue is a session fixation flaw that enables impersonation of users when the remem...
CVE-2015-8124
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id...
When WSCReconnectMode Value 8 is Set a Windows Logoff and Logon Happens, Existing Sessions Should Reconnect Automatically
When WSCReconnectMode value 8 is set the existing session does not reconnect on logon. The expected behavior is on logon the session will reconnect...
Moodle cross-site scripting vulnerability (CNVD-2015-07728)
Moodle is a free, open source e-learning software platform. Moodle suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...
Updated dovecot packages fix security vulnerability
A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...
MGASA-2015-0452 Updated dovecot packages fix security vulnerability
A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...
Moderate: Red Hat Bug Fix Advisory: samba bug fix and enhancement update
Updated samba packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines...
MediaWiki cross-site scripting vulnerability (CNVD-2015-07394)
MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or...
GLSA-201510-06 : Django: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201510-06 Django: Multiple vulnerabilities Multiple vulnerabilities have been found in Django: Session backends create a new record anytime request.session was accessed CVE-2015-5143 Built-in validators in Django do not properly...
WordPress User List Table Cross-Site Scripting Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. WordPress fails to adequately filter user-submitted input, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTML code that can capture sensitive...
Revive Adserver Unauthorized Operation Vulnerability
Revive Adserver is an open source ad management system from the Revive Adserver team. A security vulnerability in Revive Adserver versions prior to 3.2.2 can be exploited by remote attackers to perform restricted operations with the help of unexpired sessions established by deleted or disconnecte...
python-django: Denial-of-service possibility in logout() view by filling session store
It was found that certain Django functions would, in certain circumstances, create empty sessions. A remote attacker could use this flaw to fill up the session store or cause other users' session records to be evicted by requesting a large number of new sessions...