Gentoo Security Advisory GLSA 200711-21 (bochs)

The remote host is missing updates announced in advisory GLSA 200711-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2894

CVE-2008-2894 affects NCH Software Classic FTP 1.02 for Windows. The vulnerability is a directory traversal in the FTP client that lets remote FTP servers cause creation or overwriting of arbitrary files via a .. sequence in a response to a LIST command. The issue originates from how the LIST res...

CVE-2008-2894

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31942...

GLSA-200711-21 : Bochs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200711-21 Bochs: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated flopp...

Fedora 7 : bochs-2.3-7.fc7 (2007-1778)

This security update of bochs fixes CVE-2007-2894 : The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error. Note that Tenable Network Security...

Debian DSA-1396-1 : iceweasel - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1095 Michal Zalewski discovered that the unload event handler had access t...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4574)

This update brings Mozilla Firefox to security update version 2.0.0.8 Following security problems were fixed : - MFSA 2007-26 / CVE-2007-3844: Privilege escalation through chrome-loaded about:blank windows Mozilla researcher mozbugra4 reported that a flaw was introduced by the fix for MFSA 2007-2...

Mozilla Foundation Security Advisory 2007-32

Mozilla Foundation Security Advisory 2007-32 Title: File input focus stealing vulnerability Impact: Moderate Announced: October 18, 2007 Reporter: hong, Charles McAuley Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description A user on the Sla.ckers.org forums named hong...

DSA-1392-1 xulrunner - several vulnerabilities

Bulletin has no description...

CVE-2007-2894

CVE-2007-2894 affects Bochs 2.3’s emulated floppy disk controller. A local user inside the guest OS can trigger a divide-by-zero, causing a denial of service (virtual machine crash) via vectors not specified in the public description. Related advisories (Gentoo GLSA 200711-21, Fedora/OpenVAS entr...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

CVE-2006-2894

The CVE-2006-2894 issue affects Mozilla Firefox up to 1.5.0.4 and Firefox 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, SeaMonkey before 1.1.5, Netscape 8.1 and earlier. A user-assisted trick using OnKeyDown/OnKeyPress/OnKeyUp events can cause characters of a target filename to be inserted into a f...

CVE-2005-2894

PBLang 4.65 (and possibly earlier) contains a Cross-site scripting (XSS) vulnerability in the user registration process. The flaw allows remote attackers to inject arbitrary web script or PHP via the location field, as described in CVE-2005-2894. The NVD entry lists this as a MEDIUM-severity issu...

CVE-2025-2894

creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2025-03-28 00:57:13+00:00| seen| http://takeonme.org/cves/cve-2025-2894/ 2025-03-28 03:27:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9262 2025-03-28 05:12:12+00:0...