CVE-2011-1503

The XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary 1 XSL and 2 XML files via a file:/// URL...

Fedora Update for libxml2 FEDORA-2011-2699

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2011-2699 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DSA-2219-1 xmlsec1 - file overwrite

Bulletin has no description...

Fedora Update for libxml2 FEDORA-2011-2697

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2011-2697 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Database 11g. Authentication is not required to exploit this vulnerability. The specific flaw exists within a JSP script exposed via an HTTPS server running by default on TCP port 1158. The...

JVN#36765384: Google Chrome information disclosure vulnerability

Google Chrome contains an information disclosure vulnerability caused by the improper handling of XML files. Impact When viewing a specially crafted web page, information may be disclosed. Solution Update the Software Update to the latest version according to the information provided by the...

GetSimple CMS 2.01 and 2.02 Administrative Credentials Disclosure

Exploit for php platform in category web applications ================================================================= GetSimple CMS 2.01 and 2.02 Administrative Credentials Disclosure ================================================================= Researcher: Michael Brooks Affecting: GetSimp...

Getsimple CMS 2.01 2.02 - Administrative Credentials Disclosure

Getsimple CMS 2.01 2.02 - Administrative Credentials Disclosure Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01:...

Getsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure

Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548 download svn for 2.02beta: svn...

Apple Safari libxml Denial of Service Vulnerability

The host is installed with Apple Safari web browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafarilibxmldosvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple Safari libxml Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 201...

Apple Safari libxml Denial of Service Vulnerability

Apple Safari web browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Skype Extras Manager (skypePM.exe) skype-plugin: URI Arbitrary XML File Deletion (credentialed check)

According to its timestamp, the version of Skype installed on the remote host likely includes a version of the Skype Extras Manager skypePM.exe that has a flaw in its handling of the 'skype-plugin:' protocol. If an attacker can trick a user on the affected system into clicking on a specially...

libxml2: Denial of service

Background libxml2 is a library to manipulate XML files. Description The following vulnerabilities were reported after a test with the Codenomicon XML fuzzing framework: Two use-after-free vulnerabilities are possible when parsing a XML file with Notation or Enumeration attribute types...

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-028 March 11, 2010 -- Affected Vendors: Skype -- Affected Products: Skype -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against...

Skype URI Processing Arbitrary XML File Deletion Vulnerability

This vulnerability allows remote attackers to remove arbitrary XML files on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in Skype's handling of the 'skype-plugin:' protocol. A...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

openSUSE Security Update : expat (expat-1653)

Specially crafted XML files could crash applications that use expat to parse such files CVE-2009-3560. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update expat-1653. The text description of this...

Fedora Core 11 FEDORA-2009-12716 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12716. OpenVAS Vulnerability Test $Id: fcore200912716.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12716 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-12690 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12690. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SuSE9 Security Update : libxml2 (YOU Patch Number 12350)

A previous security fix for libxml2 caused problems when processing large xml files. The patch has been reworked so processing large files works again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...