Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

CVE-2014-3924

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

PT-2014-5610

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Usermin versions prior to 1.600 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via vectors related to...

CVE-2014-3924: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

Sun Java Web Start BasicServiceImpl - Remote Code Execution (Metasploit)

$Id: javabasicserviceimpl.rb 11623 2011-01-22 00:16:57Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sun Java Web Start BasicServiceImpl Code Execution

This module exploits a vulnerability in Java Runtime Environment that allows an attacker to escape the Java Sandbox. By injecting a parameter into a javaws call within the BasicServiceImpl class the default java sandbox policy file can be therefore overwritten. The vulnerability affects version 6...

CVE-2010-0650

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...

CVE-2009-3746

XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711...

CVE-2009-3746: Undefined Security Weakness

XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711...

Design/Logic Flaw

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-2711: Exposure of Sensitive Information to an Unauthorized Actor

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-1276

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail...

CVE-2009-1276: Exposure of Sensitive Information to an Unauthorized Actor

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail...

openSUSE 10 Security Update : xscreensaver (xscreensaver-5156)

This patch fixes problem with popup windows usually from instant messaging applications, which may appear on top of xscreensaver while the screen is locked. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2007-3657

Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. NOTE: this issue has been disputed by third party researchers, stating that "this does not crash on me, and I can't see a likely mechanism of action that would lead to a DoS...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

CVE-2005-3889

Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads...

CVE-2005-3889

Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads...

CVE-2005-3889: Undefined Security Weakness

Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large number of threads...