CVE-2009-1581

functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets CSS positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting XSS and phishing attacks, via a crafted...

CVE-2009-0942

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...

CVE-2009-0942

CVE-2009-0942 affects Apple Mac OS X 10.4.11 and 10.5 prior to 10.5.7 where Help Viewer loads CSS references from URLs without verifying they reside in a registered help book. This can allow a remote attacker to craft a malicious help: URL that triggers AppleScript execution and arbitrary code ex...

CVE-2009-0942

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...

Cross site scripting

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

CVE-2009-1616

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

Coppermine Photo Gallery css参数跨站脚本漏洞

BUGTRAQ ID: 34782 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的docs/showdoc.php文件没有正确地验证用户所提供的css参数便返回给了用户，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Coppermine Photo Gallery 1.4.x Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Cross site scripting

Cross-site scripting XSS vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets CSS...

CVE-2009-1035

Cross-site scripting XSS vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets CSS...

CVE-2009-1035

The CVE-2009-1035 entry applies to the Drupal Tasklist module (versions 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1). The vulnerability is an XSS flaw where remote authenticated users can inject arbitrary web script or HTML via Cascading Style Sheets (CSS). Impact is a user-driven XS...

Firefox 2 and 3 - Layout engine crashes

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which...

Hot concern:MS09-0 0 2 IE7 exploits the principle of analysis-vulnerability warning-the black bar safety net

Microsoft in GMT + 2, on 1 1, released MS09-0 0 2 vulnerability security update program, Ann-day lab anti-virus monitoring network found that the use of this vulnerability exploit code has been released to the Internet, if the user does not promptly install patches, then there is a vulnerability ...

Fedora Update for roundcubemail FEDORA-2008-5342

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2008-5342 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft IE畸形CSS处理内存破坏漏洞（MS09-002）

BUGTRAQ ID: 33628 CVECAN ID: CVE-2009-0076 Internet Explorer是微软Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer处理XHTML strict模式的CSS样式表时存在内存破坏漏洞。如果用户打开的CSS样式表包含有特定的样式指令组合，且其中一个为zoom，就可以触发这个漏洞，导致以当前登录用户的权限执行任意代码。 Microsoft Internet Explorer 7.0 厂商补丁： Microsoft ---------...

Fedora Update for roundcubemail FEDORA-2008-11247

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2008-11247 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2009-0076

Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets CSS stylesheet in a crafted HTML document, aka "CSS Memory Corruptio...

CVE-2009-0076

CVE-2009-0076 affects Microsoft Internet Explorer 7 under XHTML strict mode, allowing remote code execution via a malformed CSS stylesheet in a crafted HTML document (CSS Memory Corruption). The connected MSRC/MSKB data (MS09-002) confirms this vulnerability and describes a cumulative security up...

CVE-2009-0076

Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets CSS stylesheet in a crafted HTML document, aka "CSS Memory Corruptio...

Microsoft Internet Explorer Malformed CSS Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when processing, in XHTML strict mod...

[SECURITY] Fedora 10 Update: roundcubemail-0.2-7.stable.fc10

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...