3960 matches found
Windows help system buffer overflow
Buffer overflow on CHM files parsing...
Microsoft HTML Help <= 6.1 Stack Overflow
No description provided by source. Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi...
Microsoft HTML Help 6.1 - Local Stack Overflow
Microsoft HTML Help 6.1 - Local Stack Overflow Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011...
Microsoft HTML Help 6.1 - Local Stack Overflow
Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi Auriemma e-mail:...
CVE-2011-0063: Improper Limitation of a Pathname to a Restricted Directory
The listfileget function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. dot dot...
Majordomo2 directory traversal
Directory traversal on help command processing via e-mail or Web...
Mandriva Update for eclipse MDVSA-2011:032 (eclipse)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : eclipse (MDVSA-2011:032)
A vulnerability has been found and corrected in eclipse : Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp o...
VMSA-2009-0017 : VMware vCenter, ESX patch and vCenter Lab Manager releases address XSS issues
a. WebWorks Help - Cross-site scripting vulnerability WebWorks Help is an output format that allows online Help to be delivered on multiple platforms and browsers, which makes it easy to publish information on the Web or on an enterprise intranet. WebWorks Help is used for creating the online hel...
PT-2011-2045 · Great Circle Associates · Majordomo
Name of the Vulnerable Software and Affected Versions: Majordomo versions prior to 20110131 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences in the help command. This can be achieved by sending a crafted email or by exploiting the web interface,...
CVE-2010-4647
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...
CVE-2008-7271
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...
CVE-2010-4647
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...
CVE-2008-7271
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...
CVE-2008-7271
CVE-2008-7271 describes multiple cross-site scripting (XSS) vulnerabilities in the Eclipse IDE Help Contents web application (Help Server). An attacker could inject arbitrary script/HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add act...
CVE-2010-4647
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...
CVE-2010-4647
The CVE-2010-4647 issue affects the Eclipse IDE Help Contents (Help Server) prior to 3.6.2. It enables remote XSS by injecting arbitrary web script/HTML via the query string to help/index.jsp or help/advanced/content.jsp, due to improper input handling in the Help Contents web app. Impact is limi...
