PT-2012-6007

Name of the Vulnerable Software and Affected Versions WeeChat versions 0.3.0 through 0.3.9.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to shell expansion, by exploiting the hook process function in the...

CVE-2011-2996

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2011-2996

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2011-2996

CVE-2011-2996 concerns an unspecified vulnerability in the Firefox plugin API present in Firefox 3.6.x up to (but before) 3.6.23. The issue could enable a remote attacker to cause memory corruption and an application crash, with the potential for arbitrary code execution via unknown vectors. Publ...

CVE-2011-2996: Undefined Security Weakness

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

PT-2011-4234

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.6.x through 3.6.22 Description The issue is related to an unspecified vulnerability in the plugin API, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, o...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...

CVE-2005-1091: Undefined Security Weakness

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...