13129 matches found
CVE-2014-5330
Cross-site scripting XSS vulnerability in BirdBlog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2647
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Hardcoded credentials
CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote attackers to obtain access via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-5331
Cross-site scripting XSS vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2647
Cross-site scripting XSS vulnerability in HP Operations Agent in HP Operations Manager formerly OpenView Communications Broker before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2995
Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...
CVE-2014-2995
Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...
CVE-2014-2060
The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors...
CVE-2014-2068
The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump...
CVE-2013-7330
Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions...
JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532...
JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532...
JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 epm/admin/DataGen.xsjs or 2 epm/services/multiply.xsjs in the democontent...