CVE-2008-6105: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party informatio...

DSA-1720-1 typo3-src - several vulnerabilities

Bulletin has no description...

CVE-2002-2427

The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603...

CVE-2002-2427: Improper Authentication

The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:0257 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Debian Security Advisory DSA 1711-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 1711-1. OpenVAS Vulnerability Test $Id: deb17111.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1711-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1711-1 typo3-src - remote code execution

Bulletin has no description...

Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability

Oracle Secure Backup NDMPCONECTCLIENTAUTH Command Buffer Overflow Vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Oracle Secure Backup Summary: ======== A Buffer Overflow vulnerability exists Oracle Secure Backup 10.2.0.2 through a...

Oracle Secure Backup's observiced.exe Denial Of Service vulnerability

Oracle Secure Backup's observiced.exe Denial Of Service vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers a vulnerability in observiced.exe of Oracle Secure Backup Summary: ======== A Denial Of Service vulnerability exists Oracle Secure Backup 10.2.0.2...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:1037-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Certain characters can be used to allow cross-site scripting – Opera Security Advisories

Certain characters can be used to allow cross-site scripting – Opera Security Advisories OPCOM Team | December 17, 2008 Severity Highly Severe Problem Description When accepting HTML content from untrusted users, Web sites sometimes employ some kind of filtering to ensure that the content cannot...

IBM Workplace Web Content Management远程跨站脚本漏洞

BUGTRAQ ID: 32408 IBM Workplace Web Content Management是IBM Workplace家族的产品之一，帮助用户在Internet和内网上发布公司内容。 Web Content Management的页面导航组件没有正确地验证通过URL参数所传送的输入便返回给了用户，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 IBM Workplace Web Content Management 60G 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

WebStudio CMS (index.php pageid) Blind SQL Injection Vulnerability

No description provided by source. Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a...

devhelp, firefox, nss, xulrunner, yelp security update

CentOS Errata and Security Advisory CESA-2008:0978 An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0977 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Securi...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0977-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

RHEL 4 : seamonkey (RHSA-2008:0977)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0977 advisory. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the...

Questcms (XSS/Directory Traversal/SQL) Multiple Remote Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact:...

QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection

-------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact: bl4ckendatgmaildotcom...