Lucene search
+L

7285 matches found

OpenVAS
OpenVAS
added 2014/05/05 12:0 a.m.36 views

CentOS Update for thunderbird CESA-2014:0449 centos6

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2014:0449 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

10CVSS0.4AI score0.07543EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2014/05/05 12:0 a.m.37 views

RedHat Update for thunderbird RHSA-2014:0449-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.07543EPSS
SaveExploits5References2
Mageia
Mageia
added 2014/05/02 6:3 p.m.49 views

Updated firefox & thunderbird packages fix multiple vulnerabilities

Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user...

9.8CVSS8.6AI score0.07543EPSS
SaveExploits5References12
OSV
OSV
added 2014/05/02 6:3 p.m.10 views

MGASA-2014-0201 Updated firefox & thunderbird packages fix multiple vulnerabilities

Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user...

9.8CVSS9.2AI score0.07543EPSS
SaveExploits5References13
Tenable Nessus
Tenable Nessus
added 2014/05/01 12:0 a.m.35 views

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20140429)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1518, CVE-2014-1524, CVE-2014-1529, CVE-2014-1531 A...

9.8CVSS7.8AI score0.07543EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2014/05/01 12:0 a.m.32 views

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20140429)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2014-1518, CVE-2014-1524, CVE-2014-1529, CVE-2014-1531 A...

9.8CVSS7.8AI score0.07543EPSS
SaveExploits5References8
Cent OS
Cent OS
added 2014/04/30 12:17 p.m.68 views

thunderbird security update

CentOS Errata and Security Advisory CESA-2014:0449 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring...

9.8CVSS7.2AI score0.07543EPSS
SaveExploits5References7
RedHat Linux
RedHat Linux
added 2014/04/29 10:15 p.m.37 views

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

9.8CVSS7.2AI score0.07543EPSS
SaveExploits5References9
Mozilla
Mozilla
added 2014/04/29 12:0 a.m.46 views

Web Audio memory corruption issues — Mozilla

Security researcher Ash reported an out of bounds read issue with Web Audio. This issue could allow for web content to trigger crashes that are potentially exploitable...

9.3CVSS8.8AI score0.05423EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2014/04/29 12:0 a.m.40 views

Out-of-bounds write in Cairo — Mozilla

Security researcher Jukka Jylänki reported a crash in the the Cairo graphics library. This happens when Cairo paints out-of-bounds to the destination buffer in the compositing function when working with canvas in certain circumstances. This issue allows malicious web content to cause a potentiall...

10CVSS8.8AI score0.05601EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2014/04/07 12:0 a.m.31 views

IBM WebSphere Portal Web Content Viewer Portlet XSS (PM84525)

The version of WebSphere Portal on the remote host is affected by a cross-site scripting vulnerability. An attacker can inject arbitrary code into a user's browser which is then executed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

4.3CVSS5.4AI score0.01773EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2014/04/07 12:0 a.m.29 views

IBM WebSphere Portal 8.0.0.1 CF11 Multiple XSS

The version of IBM WebSphere Portal on the remote host is affected by multiple cross-site scripting XSS vulnerabilities : - An XSS vulnerability exists in the Web Content Manager user interface. CVE-2014-0828 - An XSS vulnerability exists in the Social Rendering feature of the IBM Connections...

4.3CVSS5.6AI score0.01161EPSS
SaveExploits2References5
NVD
NVD
added 2014/04/02 3:58 a.m.25 views

CVE-2014-0828

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

4.3CVSS5.5AI score0.01161EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2014/04/02 1:0 a.m.30 views

CVE-2014-0828

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

5.5AI score0.01161EPSS
SaveExploits1References4
CVE
CVE
added 2014/04/02 1:0 a.m.57 views

CVE-2014-0828

CVE-2014-0828 is an XSS in IBM WebSphere Portal's Web Content Manager UI affecting WebSphere Portal 6.1.0.x (up to 6.1.0.6 CF27), 6.1.5.x (up to 6.1.5.3 CF27), 7.0.0.x (up to 7.0.0.2 CF27), and 8.0.0.x before 8.0.0.1 CF11. The root cause is insufficient input filtering in the WCM UI/Social Render...

4.3CVSS5.7AI score0.01161EPSS
SaveExploits1References4Affected Software1
seebug.org
seebug.org
added 2014/04/02 12:0 a.m.29 views

IBM WebSphere Portal Web Content Manager UI 跨站脚本漏洞

CVE ID:CVE-2014-0828 IBM WebSphere Portal提供了一个组合应用程序或业务mashup框架,并且提供了一种高级工具来构造灵活的,基于SOA的解决方案。 由于某些关于社会渲染功能的输入在返回用户前没有正确过滤,攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 IBM WebSphere Portal 6.x IBM WebSphere Portal 7.x IBM WebSphere Portal 8.x IBM WebSphere Portal 8.0.0.1 CF11版本以修复此漏洞,建议用户下载使用:...

4.3CVSS6.6AI score0.01161EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2014/03/26 12:0 a.m.38 views

SeaMonkey < 2.25 Multiple Vulnerabilities

Binary data 8172.prm...

10CVSS9.1AI score0.83633EPSS
SaveExploits23References33
Tenable Nessus
Tenable Nessus
added 2014/03/22 12:0 a.m.36 views

Ubuntu 12.04 LTS / 12.10 / 13.10 : thunderbird vulnerabilities (USN-2151-1)

Benoit Jacob, Olli Pettay, Jan Varga, Jan de Mooij, Jesse Ruderman, Dan Gohman and Christoph Diehl discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause...

10CVSS8.1AI score0.83633EPSS
SaveExploits18References11
OSV
OSV
added 2014/03/20 6:33 p.m.7 views

MGASA-2014-0137 Updated nss, firefox and thunderbird packages fix security vulnerabilities

In the NSS library before version 3.16, in a wildcard certificate, the wildcard character was embedded within the U-label of an internationalized domain name, which is not in accordance with RFC 6125 CVE-2014-1492. Several flaws were found in the processing of malformed web content. A web page...

10CVSS8.5AI score0.83633EPSS
SaveExploits20References15
OpenVAS
OpenVAS
added 2014/03/20 12:0 a.m.37 views

RedHat Update for thunderbird RHSA-2014:0316-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2014:0316-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

9.3CVSS0.3AI score0.83633EPSS
SaveExploits18References2
Rows per page
Query Builder