PT-2011-5089

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain sensitive information by reading web-server access logs or web-server Referer logs, related to a "cross-domain Referer leakage" issue...

CVE-2011-4852: Exposure of Sensitive Information to an Unauthorized Actor

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 generates web pages containing external links in response to GET requests with query strings for enterprise/mobile-monitor/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by...

PT-2011-5081

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.2.4100 Description The issue allows remote attackers to obtain sensitive information by reading web-server access logs or web-server Referer logs, due to a "cross-domain Referer leakage" issue. This occurs...

PT-2011-3532

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 8 Description The issue allows remote attackers to read content from a different domain or zone via a "trial and error" attack. An information disclosure vulnerability exists, which can be exploited by constructing ...

Microsoft Internet Explorer CVE-2011-3404 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers to view potentially sensitive...

Microsoft Internet Explorer XSS Filter Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers to...

Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)

According to its version, the instance of Adobe AIR installed on the remote Windows host is 3.0 or earlier and is reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption errors exist that could lead to code execution. CVE-2011-2445, CVE-2011-2451,...

Flash Player < 10.3.183.11 / 11.1.102.55 Multiple Vulnerabilities (APSB11-28)

Binary data 6097.prm...

Flash Player <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152. It is, therefore, reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption...

CVE-2011-2458

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

CVE-2011-2458

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

Cross site scripting

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

CVE-2011-2458

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

CVE-2011-2458

CVE-2011-2458 : Adobe Flash Player (and related AIR runtime) versions prior to the patched releases are vulnerable to a cross-domain policy bypass when loaded via Internet Explorer. Affected: Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows/macOS/Linux/Solaris, and before 11...

CVE-2011-2458: Undefined Security Weakness

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

PT-2011-3884

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and prior to 11.1.102.59 on Android Adobe AIR versions prior to 3.1.0.4880 Description The issue allows remote attackers to...

IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

Starlight media management system through the kill vulnerability-vulnerability warning-the black bar safety net

Title: Starlight media management system through the kill vulnerability Time: 2011-10-30 Team:makebugs Author: fate http://t.qq.com/MakeBug http://hi.baidu.com/micropoor 'Although the vulnerability is due to carelessness, but enough to pass to kill the whole system 'Due to international issues, T...

Flash Player <= 11.4.402.264 Multiple Vulnerabilities (APSB12-19)

Binary data 6555.prm...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 13.0.782.215 and is potentially affected by several vulnerabilities: - An unspecified error related to command line URL parsing exists. Issue 72492 - Use-after-free errors related to line box handling, counter nodes, custom...