CVE-2009-2802

Affected product: MantisBT 1.2.x prior to 1.2.2. Vulnerability arises from insecure handling of attachments and MIME types, allowing arbitrary inline attachment rendering that could enable cross-domain scripting or other browser attacks. Root cause: improper attachment/MIME processing in the lega...

CVE-2009-2802: Improper Neutralization of Input During Web Page Generation

MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks...

cPanel Cross Domain Scripting / Information Disclosure

=== Introduction === cPanel offers web hosting software that automates the intricate workings of web hosting servers. cPanel equips server administrators with the necessary tools to provide top-notch hosting to customers on tens of thousands of servers worldwide. === Description === I Cross Domai...

Each of the large browser vendors in the mobile browser present the same security issues-vulnerability warning-the black bar safety net

Test are millet 2s mobile phone, the affected vendors+test version numberthe latest version: Sogou browser myhack58: sogou mobile browser cross-domain scripting vulnerability, one of the Chat Hot Spring Resort browser series 9 9.5.1.79796 2 3 4 5 browser 5.6.2 Baidu hao123 Internet navigation...

WebKit 'parent/top' Cross Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35441/info WebKit is prone to a cross-domain scripting vulnerability. A remote attacker can exploit this vulnerability to bypass the same-origin policy and obtain potentially sensitive information or launch spoofing attac...

Adobe Flash Player 7.0.x/8.0.x/9.0.x ActiveX Control 'navigateToURL' API Cross Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26960/info The Adobe Flash Player ActiveX control is prone to a cross-domain scripting vulnerability. An attacker may leverage this issue to execute arbitrary JavaScript in the context of another domain. This issue affect...

Mozilla Firefox 1.0/1.5 XBL -MOZ-BINDING Property Cross-Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16427/info Mozilla Firefox is prone to a security vulnerability that may let a Web page execute malicious script code in the context of an arbitrary domain. The issue affects the '-moz-binding' property. This could allow ...

Microsoft Internet Explorer 5 Classic Mode FTP Client Cross Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7810/info The Microsoft Internet Explorer FTP indexing implementation could allow script code to be executed in the security zone of another FTP site. This vulnerability only exists when Internet Explorer FTP is used in...

Microsoft Internet Explorer 5.0.1 JavaScript Method Assignment Cross-Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust...

WebKit JavaScript 'onload()' Event Cross Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35315/info WebKit is prone to a cross-domain scripting vulnerability because it fails to properly restrict the access of JavaScript code when loading new webpages. A remote attacker can exploit this vulnerability to bypas...

ConPresso CMS Multiple 4.07 Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33436/info ConPresso CMS is prone to multiple remote vulnerabilities: - A cross-site scripting vulnerability - A cross-domain scripting vulnerability - A session-fixation vulnerability An attacker can exploit these issues...

WordPress < 3.7.2 / 3.8.2 Multiple Vulnerabilities

According to its version number, the WordPress install hosted on the remote web server is affected by multiple vulnerabilities : - A flaw exists within the application that could allow a remote attacker with the contributor role to publish posts. CVE-2014-0165 - A authentication bypass flaw exist...

DEBIAN-CVE-2012-2401

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content...

Mozilla Firefox vulnerability in processing content-length header

Overview Mozilla Firefox contains a vulnerability in the processing of content-length header. Kazuho Oku of Cybozu Laboratories, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When a malicious website ...

CVE-2011-0694

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

CVE-2011-0694

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

CVE-2011-0694

RealNetworks RealPlayer (Windows) with versions 11.0–11.1.1.x/SP 1.0–1.1.5 and 14.0.0–14.0.1, plus Enterprise 2.0–2.1.4, is affected by CVE-2011-0694. The flaw is in the temporary-file naming scheme used to store references to Real Media files, which is easily predictable and can be brute-forced ...

CVE-2011-0694: Undefined Security Weakness

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

CVE-2010-3934: Undefined Security Weakness

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

Microsoft Internet Explorer Multiple Vulnerabilities (2183461)

This host is missing a critical security update according to Microsoft Bulletin MS10-053. OpenVAS Vulnerability Test $Id: secpodms10-053.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2183461 Authors: Sooraj KS Updated By: Madhuri D on 2010-09-12 - ...