CVE-2009-2820

CVE-2009-2820 affects CUPS (web interface) prior to 1.4.2 on macOS X

CVE-2009-2823

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting XSS attacks via unspecified web client software...

openSUSE Security Update : rubygem-activesupport-2_1 (rubygem-activesupport-2_1-1321)

This update improves the escaping in the helper code of Ruby on Rails to protect against XSS attacks CVE-2009-3009 and an information leak CVE-2009-3086. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...

openSUSE Security Update : rubygem-actionpack-2_1 (rubygem-actionpack-2_1-1320)

This update improves the escaping in the helper code of Ruby on Rails to protect against XSS attacks CVE-2009-3009 and an information leak CVE-2009-3086. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...

Mandrake Security Advisory MDVSA-2009:265 (egroupware)

The remote host is missing an update to egroupware announced via advisory MDVSA-2009:265. OpenVAS Vulnerability Test $Id: mdksa2009265.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:265 egroupware Authors: Thomas Reinke Copyright: Copyright c 2009...

Links from indexbrowser.jsp are vulnerable to XSS attacks

CONF-16888 has introduced or re-introduced an XSS vulnerability. To reproduce: Create a new user, and for the Full Name use: noformatalert'Vulnerable'noformat Go to ../admin/indexbrowser.jsp and find the entry Click on the entry, and the script is executed. This also happens for other content typ...

Links from indexbrowser.jsp are vulnerable to XSS attacks

CONF-16888 has introduced or re-introduced an XSS vulnerability. To reproduce: Create a new user, and for the Full Name use: noformatalert'Vulnerable'noformat Go to ../admin/indexbrowser.jsp and find the entry Click on the entry, and the script is executed. This also happens for other content typ...

Google Chrome 'getSVGDocument' Cross-Site Scripting Vulnerability

This host is installed with Google Chrome and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromegetsvgdocumentxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome 'getSVGDocument' Cross-Site Scripting Vulnerability Authors: Sharath S...

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Windows)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09win.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Linux)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright:...

CVE-2009-3017

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...

CVE-2009-3013

Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Location header that contains JavaScript sequences in a...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3010

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting ...

Cross site scripting

Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3017

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...

CVE-2008-7117

eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets CSS files via a certain request with the file parameter set to style.css. NOTE: this can probably be leveraged for cross-site scripting XSS attacks...

Adobe Flex SDK Cross-Site Scripting Vulnerability - Windows

Adobe Flex SDK is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flex SDK Cross-Site Scripting Vulnerability (Windows)

This host is installed with Adobe Flex SDK and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeflexsdkxssvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ Adobe Flex SDK Cross-Site Scripting Vulnerability Windows Authors: Sharath S Copyright: Copyright c...

Adobe JRun Management Console Multiple Vulnerabilities

The host is running Adobe JRun and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobejrunmultvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ Adobe JRun Management Console Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...