CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

Mozilla Thunderbird 7.0 Multiple Vulnerabilities

Binary data 801281.prm...

CVE-2013-0127

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

PT-2013-2414

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes versions 8.x through 8.5.3 before FP4 Interim Fix 1 IBM Lotus Notes versions 9.0 before Interim Fix 1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a SCRIPT...

CVE-2013-0538: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

CVE-2013-1192

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802...

PT-2013-2959

Name of the Vulnerable Software and Affected Versions Cisco Device Manager for Cisco MDS 9000 devices versions prior to 5.2.8 Cisco Device Manager for Cisco Nexus 5000 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary commands on Windows...

CVE-2013-1192: Improper Input Validation

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802...

Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)

Google Chrome 26.0.1410.43 Webkit - OBJECT Element Use-After-Free PoC...

Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)

---object-beforeload-chrome.html--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- function sprayOnemem, size, v var a = new Uint8ClampedArraysize...

Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability (Windows)

This host is installed with google chrome frame plugin for microsoft ie and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeframedosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerabilit...

PT-2013-2939

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the element-list implementation. These vulnerabilities allow remote...

CVE-2013-1171: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

Code injection

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-0926

CVE-2013-0926 affects Google Chrome prior to 26.0.1410.43. The issue arises when copying and pasting active content in an EMBED element, enabling a user‑assisted remote attacker to trigger an unspecified impact on a crafted site. The provided documents do not specify a confirmed impact or a patch...

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-0926

Removed by vendor...

CVE-2013-0926: Improper Input Validation

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site...