191 matches found
Google Chrome < 6.0.472.59 Multiple Vulnerabilities (Sep 2010) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3408
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1823. Reason: This candidate is a duplicate of CVE-2010-1823. Notes: All CVE users should reference CVE-2010-1823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2009-1823
Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to...
CVE-2009-1823
CVE-2009-1823 is a Drupal Print module XSS affecting 5.x before 5.x-4.7 and 6.x before 6.x-1.7. It allows remote attackers to inject arbitrary script or HTML by modifying the document head with crafted UTF-8 bytes that IE6/IE7 treat as UTF-7. Related to CVE-2009-1575; other related Drupal XSS ent...
CVE-2008-1823
Technical details about CVE-2008-1823 are not publicly provided in the supplied documents. The initial description remains high‑level (unspecified vulnerability with unknown impact). Monitor forUpdates as new information may emerge.
CVE-2007-1823
CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...
CVE-2006-1823
CVE-2006-1823 corresponds to a directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier. The flaw allows remote attackers to obtain the installation path by using ".." sequences in the archive parameter to index.php, causing an error message that leaks the full pathname. This is the c...
CVE-2002-1823
CVE-2002-1823 describes a buffer overflow in the HttpGetRequest function of Zeroo HTTP server 1.5. The flaw allows remote attackers to execute arbitrary code by sending a long HTTP request. The available connected documents confirm the issue and the affected component (Zeroo HTTP server 1.5) and ...
CVE-2005-1823
CVE-2005-1823 refers to multiple cross-site scripting (XSS) flaws in Qualiteam X-Cart 4.0.8. The provided documents specify vulnerable vectors within X-Cart’s PHP files, including parameters to home.php (cat, printable), product.php (productid, mode), error_message.php (id), help.php (section), o...
CVE-2004-1823
The CVE-2004-1823 issue affects Jelsoft vBulletin 2.0 beta 3 through 3.0, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter to showthread.php and (2) the order parameter to forumdisplay.php. The vulnerability is caused by u...