395 matches found
CVE-2010-1814
MiracleLinux AXSA:2011-34:01 documents CVE-2010-1814 as one of several WebKitGTK+ vulnerabilities. Affected package: webkitgtk-1.2.6-2.AXS4. The advisory indicates these issues are fixed in that release and lists multiple CVEs addressed, including CVE-2010-1814. Remediation is to upgrade to the r...
PT-2010-3447 · Apple +2 · Webkit +3
Name of the Vulnerable Software and Affected Versions: WebKit in Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vecto...
MDVA-2009:163 : libxcb
In 2009.1, if you launch Firefox remotely via ssh, xdm, or rlogin, the menus are sluggish. When you right click on links, it takes 2-3 seconds for the menu to appear. A new libxcb package was build with fixes for this issue, bringing firefox back to it's normal speed when running remotely...
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...
CVE-2010-1303
Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary 1...
CVE-2010-1303
Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary 1...
CVE-2010-1303
Affected product: Drupal Taxonomy Filter module 6.x (before 6.x-1.1). Vulnerable component: vocabulary names, terms, and filter menus allow cross-site scripting via free tagging. Root cause: multiple XSS vulnerabilities enabling injection of arbitrary web script/HTML by remote authenticated users...
MDVA-2008:013 : skencil
The package for the drawing application Skencil contained a bug which causes it not to be able to access the system fonts correctly. Consequently, it was impossible to enter text properly in Skencil, and Skencil would consume a high level of system resources if you attempt to use the text tools...
Mandriva Update for skencil MDVA-2008:013 (skencil)
Check for the Version of skencil OpenVAS Vulnerability Test Mandriva Update for skencil MDVA-2008:013 skencil Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for skencil MDVA-2008:013 (skencil)
Check for the Version of skencil OpenVAS Vulnerability Test Mandriva Update for skencil MDVA-2008:013 skencil Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Security fix for the ALT Linux 6 package fetchmail version 6.3.9-alt1
Dec. 1, 2008 Afanasov Dmitry 6.3.9-alt1 - 6.3.9 + CVE-2007-4565: Denial of service + CVE-2008-2711: Denial of service + close memory leak when SSL connection fails and other - remove obsolete updatemenus/cleanmenus macroses...
CVE-2002-2380
NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic...
Menu Manager Mod for WebAPP - No Input Filtering
There is a system access vulnerability in the Menu Manager Mod for WebAPP. This mod is available at http://www.2xlnt.com/webapp/development/app.cgi?action=downloadinfo&cat=webappmods&id=3 . System commands can be entered in user's personal menus. Any system command works there and allows reading ...
Groove Mobile Workspace vulnerable to script injection via SharePoint replicated menus
Overview A vulnerability in the way that Groove Mobile Workspace handles SharePoint lists may allow an attacker to execute an arbitrary script. Description Groove Virtual Office provides a collaborative working environment that includes shared documents, databases, and applications among other...