Unfixed XSS vulnerability at www.digitalnet.eti.br

Security researcher mygotmanoel, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.digitalnet.eti.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/03/2008. It is...

Unfixed XSS vulnerability at www.dqscert.com

Security researcher DerickTham, has submitted on 29/12/2007 a cross-site-scripting XSS vulnerability affecting www.dqscert.com, which at the time of submission ranked 941580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...

Fedora 7 : autofs-5.0.1-29 (2007-4469)

Thu Dec 13 2007 Ian Kent - 5.0.1-29 - Bug 421351: CVE-2007-5964 autofs defaults don't restrict suid in /net f7 - use mount option 'nosuid' for '-hosts' map unless 'suid' is explicily specified. - Wed Sep 5 2007 Ian Kent - 5.0.1-28 - add ldaps support required by schema discovery. - add back LDAP...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4811)

This update brings Mozilla Thunderbird to security update version 2.0.0.9 Following security problems were fixed : - MFSA 2007-29: Crashes with evidence of memory corruption As part of the Firefox 2.0.0.8 update releases Mozilla developers fixed many bugs to improve the stability of the product...

AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...

Unfixed XSS vulnerability at www.neagenia.gr

Security researcher St@R-gaZ3r, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.neagenia.gr, which at the time of submission ranked 435413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.abooo.net

Security researcher kusomiso.com, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.abooo.net, which at the time of submission ranked 2440449 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.namedrive.com

Security researcher WHK, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.namedrive.com, which at the time of submission ranked 6867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Unfixed XSS vulnerability at www.illegal-rap.com

Security researcher CCC, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.illegal-rap.com, which at the time of submission ranked 7302367 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/11/2007. It is...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. Slackware is not vulnerable to either of these in its default configuration, but watch out if you've enabled JavaScript. More information about the security issues may be found here...

Unfixed XSS vulnerability at health.mytelus.com

Security researcher www.r3t.n3t.nl, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting health.mytelus.com, which at the time of submission ranked 11981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It i...

GLSA-200710-29 : Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-29 Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code Ulf Harnhammar from Secunia Research discovered a format string error in the incputerror function in file src/inc.c. Impact : A remote attacker could...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4574)

This update brings Mozilla Firefox to security update version 2.0.0.8 Following security problems were fixed : - MFSA 2007-26 / CVE-2007-3844: Privilege escalation through chrome-loaded about:blank windows Mozilla researcher mozbugra4 reported that a flaw was introduced by the fix for MFSA 2007-2...

Mozilla products vulnerable to memory corruption in the JavaScript engine

Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...

Unfixed XSS vulnerability at www1.falkenberg.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www1.falkenberg.se, which at the time of submission ranked 446380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at tallbohov.folkbibliotek.jarfalla.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting tallbohov.folkbibliotek.jarfalla.se, which at the time of submission ranked 855840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at lukio.kirikirjastot.fi

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting lukio.kirikirjastot.fi, which at the time of submission ranked 5611007 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at upplandsbro.axiell.com

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting upplandsbro.axiell.com, which at the time of submission ranked 5054406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is...

Unfixed XSS vulnerability at www.sat.or.th

Security researcher Narcoticxs, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.sat.or.th, which at the time of submission ranked 150121 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at gymnasiet.folkbibliotek.jarfalla.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting gymnasiet.folkbibliotek.jarfalla.se, which at the time of submission ranked 855840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...