CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

CVE-2012-2770

The CVE-2012-2770 entry concerns the Authen::ExternalAuth extension (pre-0.11) for Best Practical Solutions RT, where remote attackers could obtain a logged-in session via unspecified vectors related to the user’s RSS feed URL. Public references describe the issue similarly. Remediation is availa...

PT-2012-4246

Name of the Vulnerable Software and Affected Versions Authen::ExternalAuth extension versions prior to 0.11 Description The issue allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user." Recommendations For versions prior to 0.1...

CVE-2012-2770: Undefined Security Weakness

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20120131)

Mozilla Thunderbird is a standalone mail and newsgroup client. A use-after-free flaw was found in the way Thunderbird removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicious script could possibly use this flaw to cause...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120424)

Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in Sanitiser for OpenType OTS, used by Thunderbird to help prevent potential exploits in malformed OpenType fonts. Malicious content could cause Thunderbird to crash or, under certain conditions, possibly execute...

xulrunner to 14.0.1 (critical)

Mozilla XULRunner was updated to 14.0.1, fixing bugs and security issues: Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed eviden...

CentOS Update for thunderbird CESA-2012:0516 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for thunderbird CESA-2012:0516 centos6

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:0516 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for thunderbird CESA-2012:0516 centos5

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:0516 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2012-0678

Cross-site scripting XSS vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL...

Code injection

Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL...

CVE-2012-0678

Cross-site scripting XSS vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL...

CVE-2012-0679

Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL...

CVE-2012-0678

CVE-2012-0678 is an XSS vulnerability in Apple Safari prior to 6.0 that can be triggered via feed:// URLs. Affected product: Safari on macOS; root cause is improper handling of feed:// links leading to script/HTML injection. Confirmed by Red Hat and OpenVAS entries referencing Safari

CVE-2012-0679

The CVE-2012-0679 issue affects Apple Safari prior to version 6.0, where a feed:// URL can be used to read arbitrary local files. This is documented in the NVD entry and corroborated by Red Hat and other vendors' advisories referencing Safari

PT-2012-2784

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a feed:// URL. This could potentially lead to unauthorized actions on the affected system...

CVE-2012-0678: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL...