Mozilla Firefox Multiple Vulnerabilities -01 May13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01may13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 May13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Mozilla Firefox Multiple Vulnerabilities -01 (May 2013) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2013-2083

The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request...

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

Input validation

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

CVE-2013-1671

CVE-2013-1671 affects Mozilla Firefox prior to 21.0. The vulnerability arises in the handling of the INPUT/file input element, allowing a remote site to obtain the full local path of a file chosen via the element. This can lead to partial confidentiality impact as described in MFSA 2013-43. The i...

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

Mozilla Thunderbird 7.0 Multiple Vulnerabilities

Binary data 801281.prm...

CVE-2013-0127

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

CVE-2013-1192

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802...

Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)

---object-beforeload-chrome.html--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- function sprayOnemem, size, v var a = new Uint8ClampedArraysize...

Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)

Google Chrome 26.0.1410.43 Webkit - OBJECT Element Use-After-Free PoC...

Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability (Windows)

This host is installed with google chrome frame plugin for microsoft ie and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeframedosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerabilit...

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

Code injection

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-0926

CVE-2013-0926 affects Google Chrome prior to 26.0.1410.43. The issue arises when copying and pasting active content in an EMBED element, enabling a user‑assisted remote attacker to trigger an unspecified impact on a crafted site. The provided documents do not specify a confirmed impact or a patch...

CVE-2013-0926

Removed by vendor...

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

Free Monthly Websites 2.0 Admin Bypass / Shell Upload

========================================================================================== Free Monthly Websites 2.0 Multiple Vulnerabilities ==========================================================================================...