USN-690-3: Firefox vulnerabilities

Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Firefox could be bypassed by utilizing XBL-bindings. An...

CVE-2008-5512

CVE-2008-5512 affects Mozilla Firefox 3.x before 3.0.5 and Firefox/Thunderbird/SeaMonkey lines older than the cited versions; severity details align with NFV advisories. The vulnerability arises from a flaw in how page content can pollute XPCNativeWrappers, permitting remote attackers to run arbi...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:1037 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

CVE-2008-1559

creationtimestamp| type| source ---|---|--- 2008-03-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5310 2008-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5512...

CVE-2007-5512

CVE-2007-5512 is described as an unspecified vulnerability in the Oracle Database Vault component of Oracle Database 9.2.0.8DV and 10.2.0.3 with unknown impact and remote attack vectors. Connected documents indicate Oracle’s October 2007 CPU patch bundle addresses multiple issues including Oracle...

CVE-2006-5512

CVE-2006-5512 describes a cross-site scripting (XSS) vulnerability in Zwahlen Online Shop, specifically in the article.htm page via the cat parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The documented impact is user-visible script execution, with a CVSSv2 ba...