CVE-2009-2782

creationtimestamp| type| source ---|---|--- 2009-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9324...

CVE-2008-2782

CVE-2008-2782 affects OtomiGenX 2.2. The vulnerability is a directory-traversal flaw in the PHP components library_rss.php and rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter. This aligns with the NVD entry (CVSSv...

CVE-2008-2782

creationtimestamp| type| source ---|---|--- 2008-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5680...

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1118)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1134-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1134-1. Several security related problems have been discovered in Mozilla which are also present in Mozilla Thunderbird. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test...

Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious website could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters o...

CVE-2007-2782

CVE-2007-2782 concerns Packeteer PacketShaper where fixed increments in TCP initial sequence number (ISN) values make ISNs predictable, enabling remote attackers to predict the ISN and potentially hijack or disrupt sessions. Root cause: deterministic ISN generation. Exploitation details beyond pr...

CentOS 4 : seamonkey (CESA-2006:0609)

Updated SeaMonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...

CentOS 4 : thunderbird (CESA-2006:0611)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. The Mozilla Foundation...

RHEL 4 : firefox (RHSA-2006:0610)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0610 advisory. Mozilla Firefox is an open source Web browser. The Mozilla Foundation has discontinued support for the Mozilla Firefox 1.0 branch. This upda...

[SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1120-1 [email protected] http://www.debian.org/security/ Martin Schulze July 23rd, 2006 http://www.debian.org/security/faq -...

CVE-2006-2782

Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control...

CVE-2006-2782

Firefox 1.5.0.2 does not fix all test cases for CVE-2006-1729, allowing a remote attacker to read arbitrary files by inputting a filename into a text box that is later turned into a file upload control. The description does not provide a concrete patch version or remediation steps. No additional ...

CVE-2005-2782

CVE-2005-2782 affects AutoLinks Pro 2.1 (AutoLinks Pro) via the PHP script al_initialize.php. The vulnerability is a remote file inclusion in the alpath parameter that accepts ftp:// URLs, bypassing a blacklist that only checked for http(s). This allows an attacker to cause arbitrary PHP code exe...