Lucene search
+L

7790 matches found

OSV
OSV
•added 2006/04/14 10:02 a.m.•11 views

DEBIAN-CVE-2006-1727

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...

7.6CVSS8.8AI score0.06371EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2006/04/14 10:00 a.m.•46 views

CVE-2006-1727

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...

7.6CVSS6.7AI score0.06371EPSS
SaveExploits0
CVE
CVE
•added 2006/04/14 10:00 a.m.•134 views

CVE-2006-1727

CVE-2006-1727 affects Mozilla-derived browsers: Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1. The issue allows remote attackers to gain chrome privileges through multiple attack vectors related to the use of XBL...

7.6CVSS6.4AI score0.06371EPSS
SaveExploits0References65Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/14 12:00 a.m.•3 views

CVE-2006-1727: Undefined Security Weakness

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...

7.6CVSS6AI score0.06371EPSS
SaveExploits0References1
Mozilla
Mozilla
•added 2006/04/13 12:00 a.m.•51 views

Privilege escalation through Print Preview — Mozilla

Georgi Guninski reported two variants of using scripts in an XBL control to gain chrome privileges when the page is viewed under "Print Preview"...

7.6CVSS3.1AI score0.06371EPSS
SaveExploits0References2Affected Software4
NVD
NVD
•added 2006/03/21 1:06 a.m.•25 views

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

4.3CVSS5.8AI score0.02437EPSS
SaveExploits8References9
Prion
Prion
•added 2006/03/21 1:06 a.m.•22 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

4.3CVSS6.1AI score0.02437EPSS
SaveExploits8References9Affected Software1
Cvelist
Cvelist
•added 2006/03/21 1:00 a.m.•37 views

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

5.8AI score0.02437EPSS
SaveExploits8References9
exploitpack
exploitpack
•added 2006/03/17 12:00 a.m.•19 views

Invision Power Board (IP.Board) 2.0.4 - Print Action t Cross-Site Scripting

Invision Power Board IP.Board 2.0.4 - Print Action t Cross-Site Scripting source: https://www.securityfocus.com/bid/17144/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

6.8AI score
SaveExploits0
Prion
Prion
•added 2006/01/17 8:07 p.m.•28 views

Code injection

Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors...

2.6CVSS7.2AI score0.00345EPSS
SaveExploits0References11Affected Software2
NVD
NVD
•added 2006/01/17 8:07 p.m.•29 views

CVE-2006-0227

Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors...

2.6CVSS6.7AI score0.00345EPSS
SaveExploits0References11
CVE
CVE
•added 2006/01/17 8:00 p.m.•75 views

CVE-2006-0227

The CVE-2006-0227 entry concerns Sun Solaris 8, 9, and 10 where the lpsched component is affected. The documentation indicates multiple unspecified vulnerabilities in lpsched that could allow a local user to delete arbitrary files or disable the LP print service, with attack vectors described as ...

2.6CVSS6.7AI score0.00345EPSS
SaveExploits0References11Affected Software2
Cvelist
Cvelist
•added 2006/01/17 8:00 p.m.•35 views

CVE-2006-0227

Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors...

6.7AI score0.00345EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2006/01/15 12:00 a.m.•35 views

Ubuntu 4.10 : xpdf, cupsys vulnerabilities (USN-64-1)

A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...

7.5CVSS5.7AI score0.07217EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2006/01/15 12:00 a.m.•26 views

Ubuntu 4.10 / 5.04 : xpdf vulnerability (USN-163-1)

xpdf and kpdf did not sufficiently verify the validity of the 'loca' table in PDF files, a table that contains glyph description information for embedded TrueType fonts. After detecting the broken table, xpdf attempted to reconstruct the information in it, which caused the generation of a huge...

2.1CVSS5.5AI score0.00429EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
•added 2005/12/16 12:00 a.m.•46 views

Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities

Background Xpdf and GPdf are PDF file viewers that run under the X Window System. Poppler is a PDF rendering library based on Xpdf code. The Common UNIX Printing System CUPS is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files. Description infamous41md discovered that...

7.5CVSS7.2AI score0.0614EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2005/11/15 12:00 a.m.•28 views

HPSBPI02078 SSRT5979 rev.3 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A), Remote Denial of Service (DoS)

Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY Potential vulnerabilities have been identified with the HP Jetdirect 635n IPv6/IPsec Print Server J7961A . These vulnerabilities may be exploited remotely by an unauthorized user to create a Denial of Service DoS...

2.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2005/10/11 12:00 a.m.•21 views

Microsoft Windows Print Spooler Service Buffer Overflow (MS05-043; CVE-2005-1984)

The Print Spooler service is a system service that manages print job spools to the printer. A vulnerability was detected in the Print Spooler service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted Print Spooler Service packe...

7.5CVSS7.2AI score0.55297EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2005/10/11 12:00 a.m.•16 views

Microsoft Windows Print Spooler Service Buffer Overflow (MS05-043; CVE-2005-1984)

The Print Spooler service is a system service that manages print job spools to the printer. A vulnerability was detected in the Print Spooler service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted Print Spooler Service packe...

7.5CVSS7.2AI score0.55297EPSS
SaveExploits1
Cvelist
Cvelist
•added 2005/09/14 4:00 a.m.•30 views

CVE-2005-2886

Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via 1 the print parameter to the print module, the sitename parameter to 2 bbsmilies or 3 bbcoderef module, or 4 the hlpfile...

5.9AI score0.01255EPSS
SaveExploits1References5
Rows per page
Query Builder