34 matches found
Mail.ru: [XSS] data-url в письмах
XSS via DOM clobbering on message reading functionality...
Mail.ru: XSS в теле письма, в новой версии почты.
DOM clobbering in new "Octavius" interface beta feature led to stored XSS on message reading...
Mandriva Linux Security Advisory : postgresql (MDVSA-2015:048)
Multiple vulnerabilities has been discovered and corrected in postgresql : Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certain values, contrary to expected permissions CVE-2014-8161. Andres...
Ubuntu 14.04 LTS : PostgreSQL vulnerabilities (USN-2499-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2499-1 advisory. Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certai...
USN-2499-1: PostgreSQL vulnerabilities
Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certain values, contrary to expected permissions. CVE-2014-8161 Andres Freund, Peter Geoghegan and Noah Misch discovered that PostgreSQL incorrectly...
CVE-2011-2774
The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter...
CVE-2011-2774
The vulnerability CVE-2011-2774 affects Mahara 1.3.x and 1.4.x before 1.4.1, where the "Reply to message" feature allows remote authenticated users to read another user’s messages by tampering with the replyto parameter. Impact is unauthorized access to message content (no additional impact detai...
CVE-2010-2639
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...
Microsoft Exchange Outlook Web Access crossite scripting
Crossite scripting on message reading...
CVE-2002-1880
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...
CVE-2003-1162
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...
Domino Web Access DoS
Message with large broken image causes server to crash on message reading...