CVE-2008-2933: Improper Input Validation

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-2540

CVE-2008-2540 involves Safari on macOS and Safari/IE on Windows where downloading an object with an unrecognized content type can place malware in user directories and, via an untrusted search path, lead to remote code execution on Windows (Carpet Bomb / Blended Threat). Connected docs confirm th...

CVE-2006-2540

The CVE-2006-2540 issue affects a Diesel PHP Job Site component (install.php) in which sensitive data (user credentials) is sent to an email address controlled by the product developers, causing a privacy leak. The published description identifies a leakage of credentials and other sensitive info...

CVE-2006-2540

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

CVE-2004-2540

CVE-2004-2540 describes a deserialization vulnerability in readObject for Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.0 through 1.4.2_05. Reported impact is a denial of service where crafted serialized data can cause the JVM to become unresponsive. The known aff...

CVE-2004-2540

readObject in 1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.0 through 1.4.205 allows remote attackers to cause a denial of service JVM unresponsive via crafted serialized data...

CVE-2004-2540

readObject in 1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.0 through 1.4.205 allows remote attackers to cause a denial of service JVM unresponsive via crafted serialized data...