JVN Info.

Id
7832  
Name
JVNDB-2015-003152  
Title
Drupal 用 Current Search Links モジュールにおけるクロスサイトスクリプティングの脆弱性  
Summary
Drupal 用 Current Search Links モジュールには、"Append the keywords passed by the user to the list (リストにユーザから渡されたキーワードを追加)" オプションが無効になっている場合、クロスサイトスクリプティングの脆弱性が存在します。  
Nvdinfo
CVE-2015-4388  
Cvssv2
2.6  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003152.html  
Published Date
2015-04-01  
Registered Date
2015-06-18  
Last Updated Date
2015-06-18  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51728 H28_MUN_DWEB_Q4_172_16_240_seg.csv 7832 89681 CVE-2011-0802 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0013) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Java Runtime Environment (JRE) - libuser - Netscape Portable Runtime (NSPR) - Network Security Services (NSS) - OpenSSL Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0013 http://lists.vmware.com/pipermail/security-announce/2012/000169.html Version : ESX 4.0 Installed build : 208167 Fixed build : 660575
57309 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 7832 89681 CVE-2011-0802 10 Critical 172.16.240.115 tcp 443 VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0013) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Java Runtime Environment (JRE) - libuser - Netscape Portable Runtime (NSPR) - Network Security Services (NSS) - OpenSSL Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2011-0013 http://lists.vmware.com/pipermail/security-announce/2012/000169.html Version : ESX 4.0 Installed build : 208167 Fixed build : 660575