516 matches found
Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability - Mac OS X
Apple Safari is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability - Windows
Apple Safari is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows)
This host is installed with Apple Safari and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariwebcorewebkitxssvulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability Windows Authors: Antu Sanadi...
Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Linux)
This host is installed with Google Chrome and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebcorewebkitxssvulnlin.nasl 5958 2017-04-17 09:02:19Z teissa $ Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability Linux Authors: Antu Sanadi...
WebKit跨站脚本保护绕过漏洞
CVE ID:CVE-2012-5851 WebKit是一款开放源代码的浏览器引擎。 Google Chrome 22及Safari 5.1.7使用的WebKit中WebCore html/parser/XSSAuditor.cpp没有考虑到所有可能的反射数据所输出的内容,允许攻击者通过特制的字符串比较容易的绕过跨站脚本保护机制。 0 Google Chrome 22使用的WebKit Apple Safari 5.1.7使用的WebKit 目前没有详细解决方案提供: http://www.webkit.org...
Mandrake Linux Security Advisory : netscape (MDKSA-2000:080)
A buffer overflow exists in the HTML parser code of the Netscape web browser in all versions prior to and including 4.75. This buffer overflow can be exploited by a remote attacker or web site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Scientific Linux Security Update : kdelibs on SL4.x, SL5.x i386/x86_64
A flaw was found in the way the KDE CSS parser handled content for the CSS 'style' attribute. A remote attacker could create a specially crafted CSS equipped HTML page, which once visited by an unsuspecting user, could cause a denial of service Konqueror crash or, potentially, execute arbitrary...
Google Chrome Multiple Vulnerabilities (Windows) - June 11
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun11.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome Multiple Vulnerabilities Windows - June 11 Authors: Madhuri D Copyright: Copyright c 2011...
Google Chrome Multiple Vulnerabilities (Linux) - June 11
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnlinjun11.nasl 7006 2017-08-25 11:51:20Z teissa $ Google Chrome Multiple Vulnerabilities Linux - June 11 Authors: Madhuri D Copyright: Copyright c 2011...
Google Chrome Multiple Vulnerabilities (Jun 2011) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2350
The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2011-2350
The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2011-2350
The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2011-2350
CVE-2011-2350: Google Chrome's HTML parser is affected before version 12.0.742.112 due to lifetime and re-entrancy issues. This can allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The description and linked references indicate a patch/update i...
CVE-2011-2350
Removed by vendor...
Google Chrome < 12.0.742.112 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 12.0.742.112. As such, it is affected by the following vulnerabilities : - An out-of-bounds read in NPAPI string handling exists. Issue 77493 - A use-after-free issue exists in SVG font handling. Issue 84355 - A memory...
Google Chrome < 12.0.742.112 Multiple Vulnerabilities
Binary data 5970.pasl...
Stable Channel Update
The Chrome Stable channel has been updated to 12.0.742.112 for all platforms. This release contains an updated version of Adobe Flash, along with the security fixes noted below. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be...
SuSE 10 Security Update : perl-HTML-Parser (ZYPP Patch Number 6622)
Specially crafted HTML documents could cause perl-HTML-Parser to run into an endless loop. CVE-2009-3627 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49915;...
Mozilla incorrectly frees used memory (MFSA 2010-03)
Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...