Lucene search
K

2018 matches found

OpenVAS
OpenVAS
added 2014/10/01 12:0 a.m.17 views

Fedora Update for baloo-widgets FEDORA-2014-11448

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS9.1AI score0.00359EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/10/01 12:0 a.m.15 views

Fedora Update for nepomuk-widgets FEDORA-2014-11448

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS9.1AI score0.00359EPSS
Exploits1References2
Fedora
Fedora
added 2014/09/27 9:47 a.m.17 views

[SECURITY] Fedora 20 Update: superkaramba-4.14.1-1.fc20

SuperKaramba is a tool that allows you to easily create interactive widgets on your KDE desktop...

6.9CVSS2.6AI score0.00359EPSS
Exploits1
Fedora
Fedora
added 2014/09/27 9:47 a.m.24 views

[SECURITY] Fedora 20 Update: nepomuk-widgets-4.14.1-1.fc20

Nepomuk Widgets...

6.9CVSS1AI score0.00359EPSS
Exploits1
NVD
NVD
added 2014/09/22 10:55 a.m.15 views

CVE-2014-6010

The Rasta Weed Widgets HD aka aw.awesomewidgets.rastaweed application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
Exploits0References3
Prion
Prion
added 2014/09/22 10:55 a.m.12 views

Information disclosure

The Rasta Weed Widgets HD aka aw.awesomewidgets.rastaweed application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/09/22 10:0 a.m.36 views

CVE-2014-6010

CVE-2014-6010 concerns the Android app Rasta Weed Widgets HD (aw.awesomewidgets.rastaweed) version 4, where the component handling SSL/TLS does not verify X.509 certificates. The root cause is certificate validation bypass, enabling MITM attackers to spoof servers and disclose sensitive data via ...

5.4CVSS6AI score0.00271EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/22 10:0 a.m.18 views

CVE-2014-6010

The Rasta Weed Widgets HD aka aw.awesomewidgets.rastaweed application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
Exploits0References3
Fedora
Fedora
added 2014/08/28 3:34 p.m.19 views

[SECURITY] Fedora 20 Update: gtk3-3.10.9-2.fc20

GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets, GTK+ is suitable for projects ranging from small one-off tools to complete application suites. This package contains version 3 of GTK+...

7.2CVSS3.3AI score0.00331EPSS
Exploits0
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.6 views

Dynamic Widgets <= 1.5.1 - Cross-Site Scripting (XSS)

The Dynamic Widgets WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

2AI score
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.10 views

Yahoo! Widgets Engine 4.0.3 YDPCTL.DLL ActiveX Control Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25086/info Yahoo! Widgets Engine is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue...

7.1AI score
Exploits0
NVD
NVD
added 2014/06/09 7:55 p.m.16 views

CVE-2013-1973

The autocomplete callback in Autocomplete Widgets for Text and Number Fields autocompletewidgets module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obtain sensitive field values via unspecified vectors...

4CVSS6.1AI score0.01094EPSS
Exploits0References5
Cvelist
Cvelist
added 2014/06/09 7:0 p.m.21 views

CVE-2013-1973

The autocomplete callback in Autocomplete Widgets for Text and Number Fields autocompletewidgets module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obtain sensitive field values via unspecified vectors...

6.1AI score0.01094EPSS
Exploits0References5
CVE
CVE
added 2014/06/09 7:0 p.m.47 views

CVE-2013-1973

CVE-2013-1973 affects the Drupal contributed module Autocomplete Widgets for Text and Number Fields . The vulnerability lies in the autocomplete callback not properly enforcing node permissions, enabling remote authenticated users to obtain sensitive field values via unspecified vectors. Affected...

4CVSS6.2AI score0.01094EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2013/12/17 3:21 p.m.18 views

CVE-2013-6721

Cross-site scripting XSS vulnerability in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets...

3.5CVSS5.1AI score0.011EPSS
Exploits1References5
Prion
Prion
added 2013/12/17 3:21 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets...

3.5CVSS5.5AI score0.011EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2013/12/17 11:0 a.m.18 views

CVE-2013-6721

Cross-site scripting XSS vulnerability in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets...

5.1AI score0.011EPSS
Exploits1References5
CVE
CVE
added 2013/12/17 11:0 a.m.43 views

CVE-2013-6721

CVE-2013-6721 is an XSS vulnerability in IBM WebSphere Service Registry and Repository (WSRR) affecting 7.5.x before 7.5.0.4 and 8.x up to 8.0.0.2. The issue allows remote authenticated users to inject arbitrary scripts/HTML via WSRR widgets. Public details indicate the root cause is insufficient...

3.5CVSS5.2AI score0.011EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.10 views

Fedora Update for nepomuk-widgets FEDORA-2013-13112

Check for the Version of nepomuk-widgets OpenVAS Vulnerability Test Fedora Update for nepomuk-widgets FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

7.5CVSS0.1AI score0.04412EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.14 views

Fedora Update for superkaramba FEDORA-2013-13112

Check for the Version of superkaramba OpenVAS Vulnerability Test Fedora Update for superkaramba FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.5CVSS0.1AI score0.04412EPSS
Exploits1References2
Rows per page
Query Builder