Lucene search
+L

7963 matches found

NVD
NVD
•added 2007/04/30 11:19 p.m.•36 views

CVE-2007-2378

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

5CVSS6.5AI score0.00734EPSS
SaveExploits0References2
CVE
CVE
•added 2007/04/30 11:00 p.m.•101 views

CVE-2007-2378

The CVE-2007-2378 issue concerns the Google Web Toolkit (GWT) framework, where JSON data is exchanged without a protection scheme, enabling JavaScript Hijacking. IBM’s bulletin specifies ITNM (IBM Tivoli Network Manager) IP Edition 4.2 GA through 4.2.0.15 is affected, with a fix in ITNM 4.2 Fix P...

5CVSS6.5AI score0.00734EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2007/04/30 11:00 p.m.•43 views

CVE-2007-2378

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

6.5AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2007/04/30 12:00 a.m.•20 views

PT-2007-3711 · Google · Google Web Toolkit

Name of the Vulnerable Software and Affected Versions: Google Web Toolkit GWT affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This can be achieved...

5CVSS6.1AI score0.00734EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/30 12:00 a.m.•6 views

CVE-2007-2378: Undefined Security Weakness

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

5CVSS5.9AI score0.00734EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2007/02/09 12:00 a.m.•27 views

CentOS 4 : gtk2 (CESA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

2.1CVSS5.1AI score0.00933EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2007/01/26 12:00 a.m.•32 views

RHEL 4 : gtk2 (RHSA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

2.1CVSS5.1AI score0.00933EPSS
SaveExploits1References3
OSV
OSV
•added 2007/01/24 7:28 p.m.•16 views

CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

6.1AI score
SaveExploits0References23
OSV
OSV
•added 2007/01/24 7:28 p.m.•8 views

DEBIAN-CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

2.1CVSS6.7AI score0.00933EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/18 12:00 a.m.•6 views

CVE-2006-6489: Undefined Security Weakness

The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service application termination and restart via malformed packets...

5CVSS5.8AI score0.02107EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/11 12:00 a.m.•4 views

CVE-2007-0201: Undefined Security Weakness

Buffer overflow in the cmdusr function in ftp-gw in TIS Internet Firewall Toolkit FWTK allows remote attackers to execute arbitrary code via a long destination hostname dest...

10CVSS6.6AI score0.04832EPSS
SaveExploits0References1
myhack58
myhack58
•added 2006/12/16 12:00 a.m.•44 views

Through the different structure of the firewall to the back door of the place-vulnerability warning-the black bar safety net

This article describes the different configuration of the firewall is placed back door. Anyway, this article can tell you in other environments, the hackers is how to hide them into a system. Hackers always want to retain into their already compromised capacity of the system, even if the target...

7.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•33 views

Solaris 8 (sparc) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•11 views

Solaris 9 (i386) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•34 views

Solaris 2.6 (i386) : 104273-13

The remote host is missing Sun Security Patch number 104273-13 Solstice X.400 9.0 Client Toolkit Patchx86. Date this patch was last updated by Sun : Thu Nov 17 06:26:41 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•16 views

Solaris 10 (sparc) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•11 views

Solaris 2.5.1 (i386) : 104273-13

The remote host is missing Sun Security Patch number 104273-13 Solstice X.400 9.0 Client Toolkit Patchx86. Date this patch was last updated by Sun : Thu Nov 17 06:26:41 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

SaveExploits0
RedHat Linux
RedHat Linux
•added 2006/11/01 2:37 p.m.•33 views

Moderate: Red Hat Security Advisory: qt security update

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

6.8CVSS5.8AI score0.04519EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2006/10/14 12:00 a.m.•25 views

Debian DSA-942-1 : albatross - design error

A design error has been discovered in the Albatross web application toolkit that causes user-supplied data to be used as part of template execution and hence arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

7.5CVSS5.8AI score0.04254EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2006/09/29 12:00 a.m.•81 views

[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security/ http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.021 28-Sep-2006 Package: openssl Vulnerability: denial of service OpenPKG Specific: ...

10CVSS7.8AI score0.49273EPSS
SaveExploits10
Rows per page
Query Builder