Debian: Security Advisory (DSA-1506-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : seamonkey (seamonkey-4795)

This update fixed various security problems in Mozilla SeaMonkey. Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the sa...

RHEL 4 / 5 : thunderbird (RHSA-2007:1083)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site...

openSUSE 10 Security Update : seamonkey (seamonkey-4794)

This update brings Mozilla SeaMonkey to security update version 1.1.7 Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have th...

Ubuntu 6.10 / 7.04 / 7.10 : firefox regression (USN-546-2)

USN-546-1 fixed vulnerabilities in Firefox. The upstream update included a faulty patch which caused the drawImage method of the canvas element to fail. This update fixes the problem. We apologize for the inconvenience. It was discovered that Firefox incorrectly associated redirected sites as the...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4758)

This update brings Mozilla Firefox to security update version 2.0.0.10 Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have t...

CVE-2007-5947

The CVE-2007-5947 issue affects Mozilla Firefox up to 2.0.0.10 and SeaMonkey up to 1.1.7, where the jar protocol handler retrieves the inner URL regardless of MIME type and treats HTML documents inside a jar as same-origin with the inner URL. This enables cross-site scripting (XSS) via jar: URIs....

CVE-2006-5947

Conxint FTP Server 2.2.0603 (and possibly earlier) is affected by multiple directory traversal vulnerabilities that allow remote attackers to read arbitrary files and list arbitrary directories via traversal sequences in the DIR (LIST/NLST) and GET (RETR) commands. The underlying issue is directo...

CVE-2023-5947

CVE-2023-5947 is a duplicate of CVE-2023-7247 and should reference CVE-2023-7247 instead. The connected records (Red Hat and NVD) describe CVE-2023-7247 as a vulnerability in the WordPress plugin Login as User or Customer (