CVE-2016-2058: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow 1 remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or 2 remote authenticated users to inject arbitra...

PT-2016-4990

Name of the Vulnerable Software and Affected Versions Xymon versions 4.1.x through 4.3.x before 4.3.25 Description The issue allows remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page. Additionally, remote...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2015-07821)

CloudBees Jenkins is the open source continuous integration server. A cross-site scripting vulnerability exists in CloudBees Jenkins 1.638, LTS versions prior to 1.625.2, in the slave overview page, where a remote user with certain privileges can inject web script or HTML via a slave offline stat...

CVE-2015-5326

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

PT-2015-6859

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.638 Jenkins LTS versions prior to 1.625.2 Description A cross-site scripting XSS issue exists in the slave overview page, allowing remote authenticated users with specific permissions to inject arbitrary web script ...

CVE-2015-5326: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

Cisco TelePresence ISDN Gateway D-Channel DoS

According to its self-reported version number, the remote device is affected by a vulnerability that could allow an unauthorized user to cause a denial of service via a specially crafted Q.931 STATUS message. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72184;...

PT-2014-3755

Name of the Vulnerable Software and Affected Versions Cisco TelePresence ISDN Gateway versions prior to 2.21.92 Description The issue allows remote attackers to cause a denial of service, specifically a D-channel call outage, by sending a crafted Q.931 STATUS message. Recommendations For versions...

CVE-2014-0660: Improper Input Validation

Cisco TelePresence ISDN Gateway with software before 2.21.92 allows remote attackers to cause a denial of service D-channel call outage via a crafted Q.931 STATUS message, aka Bug ID CSCui50360...

Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=182 CNNVD-201110-709 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100709 Release Date: =============...

Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=182 CNNVD-201110-709 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100709 Release Date: =============...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:148)

A security vulnerability has been identified and fixed in pidgin : The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an...

webNetwork Persistent XSS Vulnerability

Exploit for php platform in category web applications ======================================= webNetwork Persistent XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

CVE-2010-2528

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

Null pointer dereference

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

CVE-2010-2528

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

CVE-2010-2528

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

CVE-2010-2528: Undefined Security Weakness

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...

ICQ buffer overflow

Buffer overflow on status message parsing...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...