83 matches found
Google Chrome Multiple Vulnerabilities - (Windows)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwin01.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities - Windows Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...
CVE-2010-0660
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging...
CVE-2010-0660
CVE-2010-0660 affects Google Chrome prior to 4.0.249.78. The issue arises when Chrome sends an https URL in the Referer header of an http request during https→http redirection, enabling remote servers to log and potentially obtain sensitive information via standard HTTP logs. Affected component i...
CVE-2009-0660
CVE-2009-0660 affects Mahara: XSS in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2, enabling remote injection via the profile and blog fields. Root cause cited as insufficient input sanitising. Versions fixed: 1.0.10 and 1.1.2 (per NVD/related advisories); Debian/DSA notes show 1.0.4-4+lenny1 as ...
Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow
Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...
Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow
Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...
Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow
Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...
DSquare Exploit Pack: D2SEC_FACEBOOK
Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...
CVE-2008-0660
The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...
KLA10079 ACE vulnerability in Aurigma Image Uploader
A buffer overflow vulnerability was found in the Aurigma Image Uploader ActiveX control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via specially designed properties...
Debian Security Advisory DSA 140-2 (libpng, libpng3)
The remote host is missing an update to libpng, libpng3 announced via advisory DSA 140-2. OpenVAS Vulnerability Test $Id: deb1402.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 140-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2007-0660
The CVE-2007-0660 issue affects the DotNetNuke (DNN) IFrame module prior to version 03.02.01. The vulnerability stems from improper validation of user-supplied input in the pass-through values, leaving them unfiltered and susceptible to XSS. A remote attacker can exploit this by using crafted URL...
CVE-2007-0660
Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...
CVE-2006-0660
CVE-2006-0660 affects FarsiNews 2.5 and earlier. Multiple directory-traversal flaws allow remote attackers to read arbitrary files or trigger path disclosures via invalid names or ".." in the archive parameter to index.php, or to include arbitrary files via the template parameter to show_archives...
CVE-2005-0660
CVE-2005-0660 affects D-Forum 1.11 with multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via certain fields, demonstrated using the page parameter in nav.php3. NVD notes network attack vector, medium complexity, no authenticati...
CVE-2005-0660
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...
CVE-2004-0660
CuteNews 1.3.1 is affected by a cross-site scripting (XSS) vulnerability in show_archives.php and show_news.php (and possibly other PHP files), allowing remote attackers to inject arbitrary script via the id parameter. This aligns with OpenVAS entries labeling it as a CuteNews XSS vulnerability a...
CVE-2004-0660
Cross-site scripting XSS vulnerability in 1 showarchives.php, 2 shownews.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter...
CVE-2002-0660
CVE-2002-0660 involves a buffer overflow in the PNG libraries that affects libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0 and other OSes. The overflow occurs in the PNG progressive reader when processing image data, potentially allowing denial of service and possibl...
CVE-2001-0660
CVE-2001-0660 affects Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier. The back-end function that processes the Global Address List (GAL) can be accessed without authentication, allowing remote attackers to identify valid user email addresses stored in the GAL. Connected sourc...