CVE-2010-3216: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."...

PT-2010-4654

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Microsoft Office for Mac version 2004 Description A remote code execution issue exists in the way Microsoft Word handles bookmarks when parsing a specially crafted Word file. This could allow an attacker to...

Microsoft Word Bookmarks Bounds Checking Code Execution (MS10-079; CVE-2010-3216)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in the way that Microsoft Word handles bookmarks inside a specially crafted Word file. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially...

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

CVE-2010-2536: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

seamonkey security update

1.0.9-60.0.1.el4 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and emoved corresponding RedHat ones 1.0.9-60.el4 - Added fixes from 1.9.1.11 1.0.9-59.el4 - Added fix for mozbz570451...

firefox security, bug fix, and enhancement update

3.6.4-8.0.1.el4 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones 3.6.4-8.el4 - Update to 3.6.4 build 7 - Disable checking for updates since they can't be applied 3.6.4-7.el4 - Update to 3.6.4 build 6 3.6.4-6.el4 - Update to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

CVE-2010-2278: Undefined Security Weakness

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

CVE-2010-2277: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

JForum 2.1.8 Cross Site Request Forgery / Cross Site Scripting

JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net "JForum is a powerful and robust discussion board system implemented in Java^tm . I...

JForum 2.1.8 BookMarks - Cross-Site Request Forgery / Cross-Site Scripting

JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net "JForum is a powerful and robust discussion board system implemented in Java^tm . I...

Joomla Bookmarks Cross Site Scripting

x Joomla Component Bookmarks x Date: 16/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team: Fatal Error x Bug: XSS on Component Bookmarks x Example: http://www.site.com/index.php?option=combookmarks=XSS x Demo:http://www.movinganthropology.de/index.php?option=combookmarks="XSS By Fatal...

Joomla Component com_delicious Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================= Joomla Component comdelicious Local File Inclusion Vulnerability =================================================================...

Joomla! Component Delicious Bookmarks 0.0.1 - Local File Inclusion

Joomla! Component Delicious Bookmarks 0.0.1 - Local File Inclusion =============================================================================================================== o Joomla Component Delicious Bookmarks Local File Inclusion Vulnerability Software : comdelicious version 0.0.1 Vendor...

Joomla! Component Delicious Bookmarks 0.0.1 - Local File Inclusion

=============================================================================================================== o Joomla Component Delicious Bookmarks Local File Inclusion Vulnerability Software : comdelicious version 0.0.1 Vendor : http://attic.e-builds.com/ Author : AntiSecurity NoGe Vrs-hCk...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-16.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...