393 matches found
PT-2013-4034
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue allows remote attackers to spoof the address bar via vectors involving a response with a 204 status code, in conjunction with a delay in notifying the user of an attempted spoo...
PT-2013-4026
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue allows remote attackers to spoof the address bar via vectors involving a response with a 204 status code, due to incorrect function calls to determine the values of...
CVE-2013-2873
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...
Design/Logic Flaw
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...
CVE-2013-2873
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...
CVE-2013-2873
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...
CVE-2013-2873
CVE-2013-2873 is a use-after-free vulnerability in Chrome/Chromium related to resource loading. Affected product: Google Chrome before 28.0.1500.71 (and Chromium components referenced in advisories). Impact per sources: potential denial of service and possibly other unspecified effects via exploi...
CVE-2013-2873
Removed by vendor...
CVE-2013-2873
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...
PT-2013-3994
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.71 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving a 404 HTTP status code during the loading of...
CVE-2013-0599
IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...
Code injection
IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...
PT-2013-2453
Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 5.1.1 through 5.1.1.2 IBM Eclipse Help System IEHS versions 5.2 through 5.2.1 Description The issue allows remote attackers to obtain sensitive information by providing a crafted parameter path and then...
CVE-2013-0599: Exposure of Sensitive Information to an Unauthorized Actor
IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...
CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
Code injection
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
CVE-2013-2503
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...
CVE-2013-2503: Improper Input Validation
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 aka Proxy Authentication Required HTTP status code...