58 matches found
CVE-2011-3091
Removed by vendor...
CVE-2011-3091
CVE-2011-3091 is a Use-after-free in the IndexedDB implementation of Chromium/Google Chrome. Public sources describe remote denial of service and possible other impact. OpenSUSE’s patch openSUSE-SU-2012:0656-1 fixes this set of Chrome/V8 CVEs (including CVE-2011-3091) by updating Chromium to abou...
Debian: Security Advisory (DSA-2113-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3091
CVE-2010-3091 affects Drupal's OpenID integration: Drupal 6.x prior to 6.18 and OpenID module 5.x prior to 5.x-1.4 do not verify openid.return_to, allowing an attacker to bypass authentication using an OpenID provider assertion. The issue is a protocol-level validation flaw in the OpenID flow. Pu...
Debian DSA-2113-1 : drupal6 - several vulnerabilities
Several vulnerabilities have been discovered in Drupal 6 a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3091 Several issues have been discovered in the OpenID module that allows malicious access to use...
[SECURITY] [DSA 2113-1] New drupal6 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2113-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 20, 2010 http://www.debian.org/security/faq -...
CVE-2009-3091
Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable...
CVE-2009-3091
Technical details about CVE-2009-3091 are not publicly available in the provided documents; no affected products, impact, vectors, or remediation are specified here. Monitor for updates.
Cumulative Security Update for Internet Explorer (969897)
This host is missing a critical security update according to Microsoft Bulletin MS09-019. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Internet Explorer Cross Domain Document Switching (MS09-019; CVE-2007-3091)
Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a script that can create a race condition that could break the same-origin policy of Internet Explorer and re...
CVE-2008-3091
CVE-2008-3091 concerns a cross-site scripting (XSS) vulnerability in Drupal’s Taxonomy Autotagger module, affecting 5.x releases prior to 5.x-1.8. The issue allows remote-authenticated users with create or edit post permissions to inject arbitrary web script or HTML via unspecified vectors. The c...
CVE-2007-3091
CVE-2007-3091 is the Internet Explorer cross-domain document switching race-condition vulnerability. The issue occurs in Internet Explorer (notably IE6 SP1 and IE7 on multiple Windows versions) where a page transition can inadvertently reveal or execute content across origins due to a race betwee...
CVE-2006-3091
CVE-2006-3091 affects PhpMyFactures 1.0 (and possibly 1.2 and earlier). The issue allows remote attackers to obtain the installation path by making direct requests to (1) /verif.php, (2) /inc/footer.php, and (3) /remises/ajouter_remise.php. The NVD entry lists a CVSS2 base score of 5.0 (Medium) w...
CVE-2005-3091
Cross-site scripting XSS vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug0005751 "thraxisp"...
CVE-2005-3091
Cross-site scripting XSS vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug0005751 "thraxisp"...
CVE-2005-3091
Cross-site scripting XSS vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug0005751 "thraxisp"...
CVE-2005-3091
CVE-2005-3091 is a cross‑site scripting vulnerability in Mantis (web-based bug tracker) prior to 1.0.0rc1. The issue allows an attacker to inject arbitrary web script/HTML. OpenVAS and Debian advisories group CVE-2005-3091 with related flaws (CVE-2005-3335/3336/3338/3339) and note remote impact. ...