1932 matches found
Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40024/info Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...
Jamit Job Board - 'post_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37701/info Jamit Job Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...
CVE-2009-2810
Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message...
Information disclosure
Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message...
CVE-2009-2810
The vulnerability CVE-2009-2810 affects Apple Mac OS X 10.6.x before 10.6.2. When Launch Services opens a quarantined folder, quarantine information is recursively cleared, allowing a user-assisted remote attacker to run arbitrary code via a quarantined application that does not trigger a warning...
CVE-2009-2810
Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message...
CVE-2009-2810: Undefined Security Weakness
Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message...
Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities
Binary data 800795.prm...
Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...
Manually add a backdoor in the system service-vulnerability warning-the black bar safety net
Now many Trojans, backdoors, worms, viruses are is by modifying the registry RUN key value to be achieved from the start but this self-starting mode is not so hidden, slightly understand the point of security people generally find computers to be black will view the RUN key value then the system...
Design/Logic Flaw
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...
Code injection
Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier UTI in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site...
CVE-2009-2811
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...
CVE-2009-2812
Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier UTI in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site...
CVE-2009-2812
Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier UTI in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site...
CVE-2009-2812
CVE-2009-2812 affects Apple Mac OS X 10.5.8 where Launch Services may misinterpret an unsafe Uniform Type Identifier (UTI) in an exported document type from a downloaded application. This can allow a remote attacker to trigger automatic opening of a file and execute arbitrary code when a user vis...
CVE-2009-2811
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...
CVE-2009-2811
CVE-2009-2811 is an Apple Mac OS X 10.5.8 vulnerability in Launch Services described as an incomplete blacklist that allows a user-assisted remote attacker to execute arbitrary code via a .fileloc file, without triggering the quarantine warning. Connected sources confirm the issue affects Launch ...
CVE-2009-2811: Improper Control of Generation of Code
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...
CVE-2009-2812: Undefined Security Weakness
Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier UTI in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site...