Mozilla Products Multiple Information Disclosure Vulnerabilities - (Windows)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - Windows Authors:...

Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X...

Microsoft Internet Explorer CSS ":visited"信息泄露漏洞

BUGTRAQ ID: 50918 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在实现上存在信息泄露漏洞，远程攻击者可利用此漏洞获取浏览器的浏览历史记录，导致泄露敏感信息 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explor...

Google Chrome CSS ':visited'信息泄露漏洞

Google Chrome是一款流行的WEB浏览器。 Google Chrome存在一个安全漏洞，可通过非破坏性缓存时序来提取历史信息，攻击者构建恶意WEB页，诱使用户解析，可获得已访问站点的敏感信息 Google Chrome 15.x 厂商解决方案 目前没有详细解决方案提供： http://www.google.com/chrome/index.html...

CVE-2010-5068

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

CVE-2002-2436

The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...

Code injection

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...

CVE-2010-5069

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

CVE-2010-5074

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...

CVE-2010-5074

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...

CVE-2010-5069

Summary of CVE-2010-5069 (Chrome): The CSS implementation in Google Chrome (noted for version 4) fails to properly handle the :visited pseudo-class, enabling remote attackers to infer visited web pages through a crafted HTML document. The vulnerability is described as an information disclosure, w...

CVE-2002-2436

CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...

CVE-2010-5068

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

CVE-2010-5069

Removed by vendor...

CVE-2010-5069

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

CVE-2010-5068

Opera 10.5 is reported to mishandle the :visited CSS pseudo-class, enabling potential information disclosure of visited pages. The CVE-2010-5068 entry documents this issue with MEDIUM severity (CVSS v2 base score 4.3). OpenVAS/OpenVAS-derived entries also reference multiple information-disclosure...

CVE-2002-2435

The Cascading Style Sheets CSS implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

CVE-2002-2435

Technical details for CVE-2002-2435 are not provided in the connected documents. Monitor for updates.

Mozilla Firefox CSS ":visited"信息泄露漏洞

BUGTRAQ ID: 50909 Firefox是一款非常流行的开源WEB浏览器。 Firefox在实现上存在信息泄露漏洞，攻击者可利用此漏洞访问敏感信息。 Mozilla Firefox 4.x Mozilla Firefox 3.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/security/ http://www.securityfocus.com/data/vulnerabilities/exploits/50909.zip...

Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net

by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...