3415 matches found
Fedora Update for evolution-rss FEDORA-2010-1936
Check for the Version of evolution-rss OpenVAS Vulnerability Test Fedora Update for evolution-rss FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for evolution-rss FEDORA-2010-1936
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian DSA-1951-1 : firefox-sage - insufficient input sanitising
It was discovered that firefox-sage, a lightweight RSS and Atom feed reader for Firefox, does not sanitise the RSS feed information correctly, which makes it prone to a cross-site scripting and a cross-domain scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[SECURITY] Fedora 12 Update: blam-1.8.5-22.fc12
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 11 Update: blam-1.8.5-18.fc11
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 11 Update: evolution-rss-0.1.4-10.fc11
This is an evolution plugin which enables evolution to read rss feeds...
Debian Security Advisory DSA 1951-1 (firefox-sage)
The remote host is missing an update to firefox-sage announced via advisory DSA 1951-1. OpenVAS Vulnerability Test $Id: deb19511.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1951-1 firefox-sage Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
[SECURITY] Fedora 12 Update: blam-1.8.5-21.fc12
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 11 Update: evolution-rss-0.1.4-9.fc11
This is an evolution plugin which enables evolution to read rss feeds...
[SECURITY] Fedora 11 Update: blam-1.8.5-17.fc11
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
firefox-sage RSS reader crossite scripting
It's possible to inject script into RSS data...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
DSA-1951-1 firefox-sage - insufficient input sanitizing
Bulletin has no description...
Fedora 11 : rt3-3.8.2-12.fc11 (2009-12827)
Fri Dec 4 2009 Ralf Corsepius - 3.8.2-12 - Add rt-3.8.2-rh-bz543962.diff BZ 543962. - Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 -...
Firefox Yoono扩展DOM事件处理器跨域脚本执行漏洞
BUGTRAQ ID: 37123 CVECAN ID: CVE-2009-4100 Yoono是一个简单易用的Firefox侧栏,允许用户方便的连接到Facebook、MySpace等社会网络和AIM等即时聊天工具。 Yoono在处理onLoad标签等DOM事件处理器时没有正确地过滤用户输入,用户受骗加载了恶意的RSS源就可能导致向用户浏览器中注入恶意脚本,并以chrome:权限执行。 Mozilla Yoono 6.1.1 厂商补丁: Mozilla ------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...
Firefox Sage extension RSS feeds cross-domain scripting vulnerability-vulnerability warning-the black bar safety net
Affected version: Mozilla Sage 1.4.3 vulnerability description: BUGTRAQ ID: 3 7 1 2 0 CVECAN ID: CVE-2 0 0 9-4 1 0 2 Sage is a Firefox the use of lightweight RSS and Atom aggregator Controller extension. Sage does not correctly filter the RSS feeds in the description tag input will be used to...
Firefox Sage扩展RSS源跨域脚本执行漏洞
BUGTRAQ ID: 37120 CVECAN ID: CVE-2009-4102 Sage是Firefox所使用的轻型RSS和Atom源汇集器扩展。 Sage没有正确地过滤RSS源中的description标签输入便用于渲染内容,用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla Sage 1.4.3 厂商补丁: Mozilla ------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: https://addons.mozilla.org/en-US/firefox/addon/77...
Firefox infoRSS扩展RSS源跨域脚本执行漏洞
BUGTRAQ ID: 37091 CVECAN ID: CVE-2009-4101 infoRSS是一款可以在状态栏显示RSS源的Firefox扩展。 infoRSS扩展没有正确地过滤RSS源中的description标签输入便用于渲染内容,用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla infoRSS 1.1.4.2 厂商补丁: Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
CVE-2009-4102
Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed...