3891 matches found
Mandriva Update for kde4-style-iaora MDVA-2010:010 (kde4-style-iaora)
Check for the Version of kde4-style-iaora OpenVAS Vulnerability Test Mandriva Update for kde4-style-iaora MDVA-2010:010 kde4-style-iaora Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
vBulletin adminCP Cross-Site Scripting
No description provided by source. .::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE...
Cross-domain data theft with CSS load – Opera Security Advisories
Cross-domain data theft with CSS load – Opera Security Advisories OPCOM Team | January 11, 2010 Summary CSS can be loaded cross-domain, and in some cases it is be possible to read the data pointed to, leading to the possibility of cross-domain data theft. Severity Moderate Opera’s response Opera...
vBulletin adminCP Cross Site Scripting
.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...
Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure
source: https://www.securityfocus.com/bid/37925/info Apple Safari is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks. Hola setTimeout"alertdocument.styleSheets0.href", 10000;...
Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure
Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure source: https://www.securityfocus.com/bid/38369/info Mozilla Firefox is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to...
Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure
Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure source: https://www.securityfocus.com/bid/37925/info Apple Safari is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further...
Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure
source: https://www.securityfocus.com/bid/38369/info Mozilla Firefox is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks. Hola setTimeout"alertdocument.styleSheets0.href", 10000;...
[SECURITY] Fedora 12 Update: stardict-3.0.1-20.fc12
StarDict is a Cross-Platform and international dictionary written in Gtk2. It has powerful features such as "Glob-style pattern matching," "Scan selection word," "Fuzzy query," etc...
SLES11: Security update for kdelibs3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 kdelibs3-default-style More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...
SLES11: Security update for kdelibs3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 kdelibs3-default-style More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...
Microsoft Internet Explorer 'Style' Object RCE Vulnerability
This host is missing a critical security update according to Microsoft Bulletin MS09-072. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-4186
Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...
Memory corruption
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...
CVE-2009-3672
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...
Microsoft IE Style对象错误对象引用远程代码执行漏洞
BUGTRAQ ID: 37085 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 IE在处理非法对象访问操作时存在内存破坏漏洞,远程攻击者可能利用此漏洞通过诱使用户访问恶意网页在用户系统上执行指令。目前这个漏洞正在被广泛的利用。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 厂商补丁: Microsoft ---------...
Talk about Ewebeditor editor of each version of the problem-the vulnerability warning-the black bar safety net
Source: Tosec Security Team 'Blog Recently read something about ewebeditor for this editor, with regard to this vulnerability or a lot, in fact a lot of people doingsecurity testingwhen most of the bias in the injection context, sometimes attention under editor aspect is good, there are mainly as...
ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability
ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-071 October 13, 2009 -- CVE ID: CVE-2009-2531 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7...
Command injection
Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...
CVE-2009-3468: Undefined Security Weakness
Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...