CVE-2010-0494

CVE-2010-0494 is the HTML Element Cross-Domain Vulnerability in Internet Explorer (IE6/6 SP1/7/8) that allows information disclosure when a user drags one IE window across another. The issue affects IE’s handling of cross-domain scripting context and is addressed by Microsoft Security Bulletin MS...

CVE-2010-0494

Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted HTML document in a situation where the client user drags one browser window across another...

Microsoft IE跨域信息泄露漏洞（MS10-018）

BUGTRAQ ID: 39047 CVE ID: CVE-2010-0494 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer中存在信息泄露漏洞，可能允许脚本访问其他域或Internet Explorer区中的浏览器窗口。攻击者可以通过创建特制网页来利用这个漏洞，如果用户查看了网页并跨第二个浏览器窗口拖拉了该窗口，就会导致信息泄露。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer...

Opera Web浏览器XSLT跨域信息泄露漏洞

BUGTRAQ ID: 38892 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下XSLT受到严格的控制以防独立站点的文档读取其他站点的内容。某些XSLT construct可能导致Opera从所生成的文档检索错误的内容，这些内容会随机的出现在缓存的之前访问页面中，其中可能包含有敏感信息。 Opera Software Opera 10.50 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)

This update of acroread fixes : - Cross-domain request vulnerability. CVE-2010-0186 : CVSS v2 Base Score: 5.8 - An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0188 : CVSS v2 Base Score: 6.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability - Linux

Adobe Reader is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability - Windows

Adobe Reader/Acrobat is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability

ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-019 February 19, 2010 -- CVE ID: CVE-2009-3988 -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox 3.0.x -- TippingPointTM IPS Customer...

Adobe Flash Player Subvert Domain Sandbox (APSB10-06; CVE-2010-0186)

A critical vulnerability has been identified in Adobe Flash Player. This vulnerability could subvert the domain sandbox and make unauthorized cross-domain requests. The vulnerability could allow remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecifie...

Adobe Flash Player/Air Multiple Vulnerabilities -feb10 (Windows)

This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultvulnfeb10win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - feb10 Windows Authors: Antu Sanadi Copyright:...

Adobe Flash Player/Air Multiple Vulnerabilities -feb10 (Linux)

This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultvulnfeb10lin.nasl 6476 2017-06-29 07:32:00Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - feb10 Linux Authors: Antu Sanadi Copyright: Copyrig...

Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability

This vulnerability allows remote attackers to bypass specific script execution enforcements on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the lack of cross doma...

Adobe Flash Player/Air Multiple Vulnerabilities (Feb 2010) - Linux

Adobe Flash Player/Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1

Ubuntu Update for Linux kernel vulnerabilities USN-896-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8961.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Network...

Adobe Flash Player/Air Multiple Vulnerabilities (Feb 2010) - Windows

Adobe Flash Player/Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

flash-plugin: unauthorized cross-domain requests (APSB10-06)

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors...

SeaMonkey < 2.0.3 Multiple Vulnerabilities

Binary data 5343.prm...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID ff6519ad-18e5-11df-9bdd-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID ff6519ad-18e5-11df-9bdd-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...