Debian: Security Advisory (DSA-2736-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4206

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory...

CVE-2012-4206

CVE-2012-4206 describes an untrusted search path vulnerability in the Windows installers of Mozilla Firefox (pre-17.0) and Firefox ESR (pre-10.0.11). A Trojan horse DLL in the user’s default downloads directory can be loaded, enabling local privilege escalation. The issue is tied to the installer...

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for webkitgtk FEDORA-2011-0121

Check for the Version of webkitgtk OpenVAS Vulnerability Test Fedora Update for webkitgtk FEDORA-2011-0121 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

FreeBSD : webkit-gtk2 -- Multiple vulnerabilities (06a12e26-142e-11e0-bea2-0015f2db7bde)

Gustavo Noronha Silva reports : The patches to fix the following CVEs are included with help from Huzaifa Sidhpurwala from the Red Hat security team. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

Google Chrome multiple vulnerabilities - November 10(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - November 10Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206

CVE-2010-4206 is a WebKit/WebKitGTK+ vulnerability described across multiple advisories as an array index error in FEBlend::apply (WebCore/graphics/filters/FEBlend.cpp). This defect was present in WebKit builds used by Google Chrome prior to 7.0.517.44 and webkitgtk before 1.2.6, among other prod...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2009-4206

CVE-2009-4206 describes an SQL injection in admin.link.modify.php for Million Dollar Text Links 1.0 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter. This is consistent with the NVD entry (CVSSv2 base score 7.5, HIGH) indicating network...

CVE-2009-4206

creationtimestamp| type| source ---|---|--- 2009-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8830...

CVE-2008-4206

CVE-2008-4206 is a PHP remote file inclusion vulnerability affecting Attachmax Dolphin 2.1.0 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL in the rel_path parameter to config.php. The public records confirm the vulnerability and its im...

CVE-2007-4206

CVE-2007-4206 affects Kaspersky Anti-Spam 3.0 MP1 prior to Critical Fix 2 (3.0.278.4). The issue is that upgrade scenarios may set incorrect permissions on application files, which might allow local users to gain privileges. The provided documents do not specify exact vulnerable files, affected c...

CVE-2006-4206

CVE-2006-4206 describes a Cross-site Scripting (XSS) vulnerability in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly earlier versions, where the calendar.asp script is vulnerable via the calendarID parameter. Attackers can inject arbitrary web script or HTML that is executed...

CVE-2005-4340

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4206. Reason: This candidate is a duplicate of CVE-2005-4206. Notes: All CVE users should reference CVE-2005-4206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-4340

CVE-2005-4340 is a duplicate of CVE-2005-4206 and, per the linked records, the active vulnerability information is in CVE-2005-4206. The connected documents describe Blackboard Learning and Community Portal System in Academic Suite versions before 6 (e.g., 6.3.1.424, 6.2.3.23, and other pre-6 rel...

CVE-2005-4206

CVE-2005-4206 affects Blackboard Learning and Community Portal System (Academic Suite) versions before 6, via a modified url parameter to frameset.jsp that loads an external URL in a frame, enabling remote redirection and phishing-like page spoofing. The issue’s root cause is the insecure handlin...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...