Gentoo Security Advisory GLSA 200507-24 (mozilla)

The remote host is missing updates announced in advisory GLSA 200507-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 779-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 779-1. Several problems have been discovered in Mozilla Firefox, a lightweight web browser based on Mozilla. For more details, please visit the referenced security advisory. The old stable distribution woody is not...

CVE-2002-2262

CVE-2002-2262 describes an unspecified vulnerability in xntpd for HP-UX 10.20–11.11 that can be exploited remotely to cause a denial of service (hang) via unknown attack vectors. The NVD CVSS metrics indicate a network-exposed issue with low attack complexity and no authentication, yielding a Ava...

CVE-2007-2262

Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the 1 relPath and 2 folder parameters. NOTE: this product was originally reported as "File117"...

CVE-2007-2262

CVE-2007-2262 corresponds to multiple PHP remote file inclusion vulnerabilities in html/php/detail.php of Sinato jmuffin, enabling remote attackers to execute arbitrary PHP code by supplying a URL via the relPath or folder parameters. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with ne...

CentOS 4 : firefox (CESA-2005:586)

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

CVE-2006-2262

Cross-site scripting XSS vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter...

CVE-2006-2262

The CVE-2006-2262 entry documents a Cross-site scripting (XSS) vulnerability in the file index.php of the Singapore 0.9.7 project. The vulnerability is triggered via the image parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the description, this affects S...

firefox security update

CentOS Errata and Security Advisory CESA-2005:586 An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source We...

Important: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

Fedora Core 4 : firefox-1.0.6-1.1.fc4 (2005-605)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

RHEL 4 : firefox (RHSA-2005:586)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:586 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content...

Fedora Core 3 : firefox-1.0.6-1.1.fc3 (2005-603)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

CVE-2004-2262

CVE-2004-2262 describes an unauthenticated remote code execution in the e107 CMS, via the ImageManager “images.php” upload parameter. The root cause is improper validation of uploaded file types, allowing a PHP file to be uploaded and executed on the server. Affected software: e107 ImageManager i...

CVE-2005-2262

The CVE-2005-2262 issue affects Firefox 1.0.3/1.0.4 and Netscape 8.0.2, where a user-initiated Set As Wallpaper/Set as Background on an image URL containing a javascript: URL with an eval could allow remote code execution. OpenVAS/OSV entries and Debian/Red Hat advisories reference this set of Fi...

CVE-2005-2262

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" in Firefox or "Set as Background" in Netscape context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewallin...