Cross site scripting

Cross-site scripting XSS vulnerability in the Unit Converter cs2unitconv extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0328

CVE-2010-0328 affects the TYPO3 Unit Converter extension cs2_unitconv (version 1.0.4). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references indicate a fixed version is 1.0.5 (possible upgrade...

CVE-2010-0328

Cross-site scripting XSS vulnerability in the Unit Converter cs2unitconv extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

kernel: r8169 issue reported at 26c3

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to 1 cause a denial of service temporary network outage via a packet with a crafted size, in conjunction with...

kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

[SECURITY] Fedora 12 Update: rubygem-actionpack-2.3.4-3.fc12

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-4.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Trango Broadband Wireless Interception

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

Trango Broadband Wireless Rogue SU Authentication Bug

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

[SECURITY] Fedora 10 Update: rubygem-actionpack-2.1.1-5.fc10

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

CVE-2009-3888

CVE-2009-3888 affects the Linux kernel up to version 2.6.31.5; the vulnerability is in do_mmap_pgoff in mm/nommu.c when an MMU is absent. Local users can trigger a denial of service (OOPS) by allocating a large amount of memory. A patch released in 2.6.31.6 fixes the issue; updating to 2.6.31.6 o...

kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-2.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.3-2.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Rittal CMC-TC Processing Unit II multiple security vulnerabilities

Crossite scripting, session hijacking...

[SECURITY] Fedora 9 Update: rubygem-actionpack-2.1.1-2.fc9

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Post Affiliate Pro v.3 (umprof_status) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Post Affiliate Pro v.3 umprofstatus Blind SQL Injection Vulnerability ======================================================================== ¦ Post Affiliate Pro v...

Polycom Videoconferencing Unit Detection

The remote web server provides an access to a Polycom videoconferencing unit. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34851; scriptversion"1.11"; scriptnameenglish: "Polycom Videoconferencing Unit Detection"; scriptsetattributeattribute:"synopsis", value: "The...

[SECURITY] Fedora 8 Update: rubygem-actionpack-2.1.1-1.fc8

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

CVE-2008-2474

Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 PCU400 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the 1 IEC60870-5-101 or 2 IEC60870-5-104 communication protocol to the X87 web interface...