Unfixed Frame Redirect vulnerability at www.stureplan.se

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.stureplan.se, which at the time of submission ranked 33875 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.farosdelmundo.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.farosdelmundo.com, which at the time of submission ranked 2943121 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.simon.com

Security researcher zimy, has submitted on 17/12/2008 a Frame Redirect vulnerability affecting www.simon.com, which at the time of submission ranked 12968 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed. If y...

Fast Forward can allow cross-site scripting – Opera Security Advisories

Fast Forward can allow cross-site scripting – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Platforms All desktop versions Problem Description If a link that uses a JavaScript URL triggers Opera’s Fast Forward feature, when the user activates Fast Forward, the...

Fast Forward can allow cross-site scripting

If a link that uses a JavaScript URL triggers Opera's Fast Forward feature, when the user activates Fast Forward, the script should run on the current page. When a page is held in a frame, the script is incorrectly executed on the outermost page, not the page where the URL was located. This can b...

Sites can change framed content on other sites – Opera Security Advisories

Sites can change framed content on other sites – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Problem Description Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be...

CVE-2008-5563

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service device crash via a malformed Extensible Authentication Protocol EAP frame...

[Backports-security-announce] Security Update for xen-3

Frederik Schüler uploaded new packages for xen-3 which fixed the following security problems: CVE-2008-0928, Debian Bug 469649, 469654, 469662, 469666 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges t...

DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame. Aruba Advisory ID: AID-12808 Revision: 1.0 For Public Release on 12/8/2008 +----------------------------------------------------...

Unfixed Frame Redirect vulnerability at www.unobserver.com

Security researcher jeff, has submitted on 12/06/2008 a Frame Redirect vulnerability affecting www.unobserver.com, which at the time of submission ranked 1170137 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently unfixe...

Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass

The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...

CVE-2008-5245

xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the openvideocapturedevice function in src/input/inputv4l.c...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

Heap overflow

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

Buffer overflow

xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the openvideocapturedevice function in src/input/inputv4l.c...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

Unfixed Frame Redirect vulnerability at www.dadesiforum.com

Security researcher cueballr, has submitted on 24/11/2008 a Frame Redirect vulnerability affecting www.dadesiforum.com, which at the time of submission ranked 9724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.g3lasers.com

Security researcher cueballr, has submitted on 24/11/2008 a Frame Redirect vulnerability affecting www.g3lasers.com, which at the time of submission ranked 28046322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

CVE-2008-5118

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...