Show filters
91 Total Results
Displaying 41-50 of 91
Sort by:
Attacker Value
Unknown
CVE-2014-0294
Disclosure Date: February 12, 2014 (last updated October 05, 2023)
Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."
0
Attacker Value
Unknown
CVE-2013-7194
Disclosure Date: December 21, 2013 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Last name, (2) Lesson name, or (3) Course name field.
0
Attacker Value
Unknown
CVE-2012-6515
Disclosure Date: January 24, 2013 (last updated October 05, 2023)
eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2012-4269
Disclosure Date: August 13, 2012 (last updated October 04, 2023)
Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message.
0
Attacker Value
Unknown
CVE-2012-4270
Disclosure Date: August 13, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in eFront 3.6.11 allows remote authenticated users to inject arbitrary web script or HTML via the subject box of a message.
0
Attacker Value
Unknown
CVE-2012-0147
Disclosure Date: April 10, 2012 (last updated October 04, 2023)
Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
0
Attacker Value
Unknown
CVE-2012-0146
Disclosure Date: April 10, 2012 (last updated October 04, 2023)
Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
0
Attacker Value
Unknown
CVE-2012-1048
Disclosure Date: February 12, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
0
Attacker Value
Unknown
CVE-2011-2012
Disclosure Date: October 12, 2011 (last updated October 04, 2023)
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
0
Attacker Value
Unknown
CVE-2011-1897
Disclosure Date: October 12, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
0
