5976 matches found
CVE-2009-2145
Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...
CVE-2009-2145
Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...
CVE-2009-2128
SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...
CVE-2009-2126
Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...
CVE-2009-2126
Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the 1 node title and 2 node body in a tree root page...
CVE-2009-2078
Multiple cross-site scripting XSS vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the 1 node title and 2 node body in a tree root page...
PPT 0day-vulnerability warning-the black bar safety net
Author: wordexp ppt "0day"configuration mode:new keys a PPT,find a 9f 0f 0 4 0 0 0 0 0 0,put back the byte to 0 3 0 0 0 0 0 0 TextHeaderAtom 3 9 9 9,9f0f,atom: this record indicates that after the text atom of meaning that can be used to distinguish text is separated into different blocks Value...
PHP Article Publisher Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ========================================================== PHP Article Publisher Remote Change Admin Password Exploit ========================================================== =-=-remote change password and add admin xpl-=-=...
CVE-2009-1461
Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...
Cross site scripting
Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...
CVE-2009-1461
CVE-2009-1461 describes a cross-site scripting (XSS) vulnerability in the Create New Page form of razorCMS 0.3 RC2 and earlier. The issue allows remote authenticated users to inject arbitrary script or HTML via the Page Title field. Affected component is the Create New Page workflow; vulnerabilit...
Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:177)
Guido Landi found A stack-based buffer overflow in xine-lib that could allow a remote attacker to cause a denial of service crash and potentially execute arbitrary code via a long NSF title CVE-2008-1878. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xterm vulnerabilities (USN-703-1)
Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...
Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)
Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2008-6173
Cross-site scripting XSS vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2008-6170
Cross-site scripting XSS vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title...
CVE-2008-6170
Cross-site scripting XSS vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title...
CVE-2009-0359
Multiple cross-site scripting XSS vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 message title or 2 user full name...
Ubuntu USN-703-1 (xterm)
The remote host is missing an update to xterm announced via advisory USN-703-1. OpenVAS Vulnerability Test $Id: ubuntu7031.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7031.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-703-1 xterm Authors: Thomas Reinke...