367 matches found
CVE-2013-1779
Cross-site scripting XSS vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors...
SA-CONTRIB-2013-030 - Clean Theme - Cross Site Scripting (XSS)
This third-party contributed theme change Drupal's interface. The theme doesn't properly sanitize user-entered content in the 3 slide gallery on the homepage leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...
SuSE 11.2 Security Update : LibreOffice (SAT Patch Number 6804)
LibreOffice was updated to SUSE 3.5 bugfix release 13 based on upstream 3.5.6-rc2 which fixes a lot of bugs. The following bugs have been fixed : - polygon fill rule. bnc759172 - open XML in Writer. bnc777181 - undo in text objects fdo36138 - broken numbering level. bnc760019 - better MathML...
aspcms background holding shell vulnerability(non-add module)and repair method-vulnerability warning-the black bar safety net
aspcms in the old version, you can add a template directly to add the asp. But the new aspcms has been restricted to add the template format is html,js,css,and of course if you are experiencing iis6 words or by iis6 parsing vulnerability put the file name into 1. asp;. html this format to get to...
CVE-2012-4497
Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...
CVE-2012-3735
The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...
Code injection
The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...
CVE-2012-3735
The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...
CVE-2012-2068
Multiple cross-site scripting XSS vulnerabilities in fancyslide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancyslide permission to inject arbitrary web script or HTML via the 1 nodetitle or 2 nodequeuetitle parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in fancyslide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancyslide permission to inject arbitrary web script or HTML via the 1 nodetitle or 2 nodequeuetitle parameter...
CVE-2012-2068
Multiple cross-site scripting XSS vulnerabilities in fancyslide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancyslide permission to inject arbitrary web script or HTML via the 1 nodetitle or 2 nodequeuetitle parameter...
Design/Logic Flaw
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...
35mm Slide Gallery v6.0 Remote File Upload Vulnerability
Exploit for php platform in category web applications Author : Dr.SiLnT HilL Title : 35mm Slide Gallery v6.0 Remote File Upload Data: 27-5-2012 Download : http://www.andymack.com/freescripts/35mmSlideGallery/35mmslidegallery6.zip Email : email protected Dork : allintext: "powered by 35mm Slide...
SA-CONTRIB-2012-041 - Fancy Slide - Cross Site Scripting (XSS)
CVE: CVE-2012-2068 This module enables you to create slideshow blocks to embed into templates. The module doesn't sufficiently filter user supplied text. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer fancyslide". Versions affected...
CVE-2012-0644
Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture...
Race condition
Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture...
CVE-2012-0644
Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture...