40 matches found
Cross site scripting
Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...
CVE-2020-9524
Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...
Product update: Virtuozzo 7.0 Update 8 Hotfix 3 (7.0.8-521)
This update provides stability fixes. Vulnerability id: PSBM-88084 Windows 2012R2 VMs could freeze due to virsh failing to create memory dumps. Vulnerability id: PSBM-88274 Container migration could fail due to a segmentation fault during CRIU restore. Vulnerability id: PSBM-88315 Host CPU could ...
Product update: Virtuozzo 7.0 Update 8 Hotfix 2 (7.0.8-514)
This update provides a stability fix. Vulnerability id: PSBM-88233 EFI VMs created on Virtuozzo 7.0.8 and 7.0.8 Hotfix 1 have incorrect NVRAM.dat file. As a result, they may not start on 7.0.8 Hotfix 2 once stopped. VM console may display the message "Guest has not initialized the display yet". F...
Product update: Virtuozzo 7.0 Update 8 (7.0.8-486)
The Update 8 for Virtuozzo 7.0 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-75892 Node could crash with error in 'memcgroupiter'. Vulnerability id: PSBM-78762 Container running a Java process could fail to migrate live due to a CRUI issue. Vulnerabili...
Information disclosure
Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016 Cumulative Update 7, and Microsoft Exchange Serve...
CVE-2018-0940
Microsoft Exchange Outlook Web Access OWA in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016...
CVE-2016-1113
Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code injection
Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...
Microsoft Exchange Server CVE-2015-2505 Information Disclosure Vulnerability
Description Microsoft Exchange Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 8 Microsoft Exchange Server...
CVE-2015-2359
Cross-site scripting XSS vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."...
CVE-2015-1771
Cross-site request forgery CSRF vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability."...
CVE-2015-1764
CVE-2015-1764 describes a Server-Side Request Forgery in Microsoft Exchange Server 2013 SP1 with CU8, where Exchange web applications fail to enforce Same Origin Policy, allowing remote attackers to send HTTP requests to intranet hosts. Affected: Microsoft Exchange Server 2013 SP1 and CU8. Impact...
CVE-2015-2359
CVE-2015-2359 affects Microsoft Exchange Server 2013, specifically the web applications in Cumulative Update 8. The vulnerability is a Cross-site Scripting/HTML injection issue caused by insufficient sanitization of user-supplied input in Exchange web applications. Potential impact includes execu...
Microsoft Exchange Server CVE-2015-2359 HTML Injection Vulnerability
Description Microsoft Exchange Server is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based...
Java JAX-WS gmbal package sandbox breach
Added: 11/23/2012 CVE: CVE-2012-5076 BID: 56054 OSVDB: 86350 Background Java API for XML Web Services JAX-WS is a technology for developing web services in Java. It is included in the Java EE 5 platform. Problem A vulnerability in JAX-WS when handling the gmbal package allows code execution outsi...
Java JAX-WS gmbal package sandbox breach
Added: 11/23/2012 CVE: CVE-2012-5076 BID: 56054 OSVDB: 86350 Background Java API for XML Web Services JAX-WS is a technology for developing web services in Java. It is included in the Java EE 5 platform. Problem A vulnerability in JAX-WS when handling the gmbal package allows code execution outsi...
FreeBSD-SA-11:01.mountd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:01.mountd Security Advisory The FreeBSD Project Topic: Network ACL mishandling in mountd8 Category: core Module: mountd Announced: 2011-04-20 Credits: Ruslan...
Mac OS X : Java for Mac OS X 10.5 Update 8
The remote Mac OS X host is running a version of Java for Mac OS X 10.5 that is missing Update 8. The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets or applications to obtain elevated privileges and lead to execution...
