الباحثون
رجوع
Michael Rutkowski
باحث من
Merlin International
#14886
من 60,594
21.1
إجمالي CVSS
الثغرات
·
5
منخفضة
2
متوسطة
3
PT-2014-4993
2014-07-24
3.5
CVE-2014-2971
Micropact
Micropact Icomplaints
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the `description` parameter in the AddStdLetter.jsp file.
PT-2012-4393
2012-08-08
4.3
CVE-2012-2960
Hewlett Packard
Hp Arcsight Logger
A cross-site scripting (XSS) issue exists in the import functionality, allowing remote attackers to inject arbitrary web script or HTML via a crafted file. This could potentially lead to unauthorized access or control of the affected system.
PT-2012-1689
2012-01-04
6.9
CVE-2011-3337
Eeye
Eeye Retina Network Security Scanner
The issue allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.
PT-2011-2619
2011-07-19
4.3
CVE-2011-0770
Hewlett Packard
Hp Arcsight Connector Appliance
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file. This could potentially lead to unauthorized access or control of the system.
PT-2011-2332
2011-04-19
2.1
CVE-2011-0412
Oracle
Oracle Solaris
The issue allows local users to obtain password hashes and conduct brute force password guessing attacks due to the storage of back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/.