Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php. Date published : 2015-09-11 http://www.securityfocus.com/archive/1/536437/100/0/threaded...
Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML...
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL. Date published : 2015-09-11 http://www.moxa.com/support/download.aspx?type=support&id=328...
The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin. Date published :...
Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators. Date published : 2015-09-11 http://www.canon.com/support/pdf/inkjet-printer.pdf http://jvn.jp/en/jp/JVN07427376/index.html
Cross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows remote attackers to inject arbitrary web script or HTML...
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified...
SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspecified vectors. Date published : 2015-09-11 http://seclists.org/fulldisclosure/2015/Sep/51 https://ics-cert.us-cert.gov/advisories/ICSA-15-181-02
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6680. Date published : 2015-09-08 https://helpx.adobe.com/security/products/shockwave/apsb15-22.html https://security.gentoo.org/glsa/201509-07
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6681. Date published : 2015-09-08 https://helpx.adobe.com/security/products/shockwave/apsb15-22.html https://security.gentoo.org/glsa/201509-07
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data. Date published : 2015-09-08 https://bugzilla.redhat.com/show_bug.cgi?id=1259867 https://github.com/openshift/origin/issues/4374
The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors. Date published : 2015-09-08 http://www.securityfocus.com/bid/76636 https://bugzilla.redhat.com/show_bug.cgi?id=1253827
Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable. Date published : 2015-09-08 http://www.securityfocus.com/bid/76636 https://bugzilla.redhat.com/show_bug.cgi?id=1253826
libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable. Date published : 2015-09-08 http://www.securityfocus.com/bid/76636 https://bugzilla.redhat.com/show_bug.cgi?id=1253824