366 matches found
openSUSE Security Update : roundcubemail (openSUSE-SU-2014:0365-1)
roundcubemail was updated to 0.9.5 to fix bugs and security issues. Fixed security issues : - CVE-2013-6172: vulnerability in handling session argument of utils/save-prefs New upstream release 0.9.5 bnc847179 CVE-2013-6172 - Fix failing vCard import when email address field contains spaces - Fix...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 calendar displayname to part.choosecalendar.rowfields.php or 2 part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or 3 unspecified...
CVE-2012-4397
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 calendar displayname to part.choosecalendar.rowfields.php or 2 part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or 3 unspecified...
Multiple stored XSS - ownCloud
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the calendar displayname to part.choosecalendar.rowfields.php part.choosecalendar.rowfields.shared.php in apps/calendar/templates/ unspecified vectors to...
Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
This host is missing a critical security update according to Microsoft Bulletin MS10-096. OpenVAS Vulnerability Test $Id: secpodms10-096.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Address Book Remote Code Execution Vulnerability 2423089 Authors: Sooraj KS Copyright: Copyright c 2010...
Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
This host is missing a critical security update according to Microsoft Bulletin MS10-096. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2010-4109
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
Cross site scripting
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
CVE-2010-4109
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
HPSBMI02614 SSRT100344 rev.2 - HP webOS Contacts Application, Remote Execution of Arbitrary Code
Potential Security Impact Remote execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP webOS Contacts Application. This vulnerability could be exploited to execute arbitrary HTML or JavaScript. RESOLUTION The vulnerability can be resolved...
horde-base -- XSS: VCARD attachments vulnerability
The Horde team reports: The major changes compared to Horde version 3.3.10 are: Fixed XSS vulnerability when viewing details of a vCard...
Windows Mobile 6.1 and 6.5 Double Free Denial of Service
No description provided by source. Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT:...
[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability
Vendor: Microsoft Product: Windows Mobile Vulnerability: Double Free Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil nver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com Vulnerability Details and Analysis: The...
Microsoft Windows Address Book Insecure Library Loading Vulnerability
This host is installed with Microsoft Address Book and is prone to insecure library loading vulnerability. This NVT has been replaced by NVT secpodms10-096.nasl OID:1.3.6.1.4.1.25623.1.0.901169. OpenVAS Vulnerability Test $Id: gbmsaddressbookinsecurelibloadvuln.nasl 5368 2017-02-20 14:34:16Z cfi ...
Windows Mobile 6.1 and 6.5 Double Free Denial of Service
Exploit for windows platform in category dos / poc ======================================================== Windows Mobile 6.1 and 6.5 Double Free Denial of Service ======================================================== Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of...
Windows Mobile 6.1 / 6.5 Denial Of Service
Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...
Microsoft Windows Address Book Insecure Library Loading Vulnerability
Microsoft Address Book is prone to an insecure library loading vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.901169. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service
Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service source: https://www.securityfocus.com/bid/44287/info Microsoft Windows Mobile is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to...
Microsoft Windows Mobile 6.1/6.5 - Double-Free Denial of Service
Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...