Lucene search
+L

2832 matches found

Cvelist
Cvelist
added 2005/02/26 5:00 a.m.57 views

CVE-2004-1753

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindowNULL calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs...

6.1AI score0.01596EPSS
SaveExploits1References7
Mozilla
Mozilla
added 2005/02/24 12:00 a.m.13 views

HTTP auth prompt tab spoofing — Mozilla

The HTTP authentication prompt appears above the currently open tab regardless of which tab triggered it. A spoofer who could get a user to open a high value target in another tab might be able to capture the user's ID and password. HTTP auth dialogs are visually distinct from the web form logins...

6.8AI score
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2005/01/29 5:00 a.m.50 views

CVE-2004-1381

Firefox before 1.0 and Mozilla before 1.7.5 allow inactive background tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks...

6.4AI score0.06879EPSS
SaveExploits2References6
Mozilla
Mozilla
added 2005/01/21 12:00 a.m.20 views

Input stealing from other tabs — Mozilla

Jakob Balle of Secunia reported two vulnerabilities in windows with multiple tabs. Malicious content in a background tab can attempt to steal information intended for the topmost tab by popping up prompt dialog that appears to come from the trusted site, or by silently redirecting input focus to ...

6.8AI score
SaveExploits0References4Affected Software2
OSV
OSV
added 2005/01/06 5:00 a.m.7 views

DEBIAN-CVE-2004-1318

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

4.3CVSS6.1AI score0.01884EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2004/12/15 12:00 a.m.17 views

2Fax 3.0 Tab Expansion - Remote Buffer Overflow

2Fax 3.0 Tab Expansion - Remote Buffer Overflow source: https://www.securityfocus.com/bid/11980/info 2fax is prone to a buffer overflow vulnerability. This issue is exposed when the software performs tab expansion operations while converting files. Since files may originate from an external or...

1.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/12/15 12:00 a.m.27 views

2Fax 3.0 Tab Expansion - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11980/info 2fax is prone to a buffer overflow vulnerability. This issue is exposed when the software performs tab expansion operations while converting files. Since files may originate from an external or untrusted source, this issue is considered remote ...

5.8AI score
SaveExploits0
securityvulns
securityvulns
added 2004/10/22 12:00 a.m.44 views

Multiple browsers tab vulnerabilities

Multiple browsers allow tab spoofing...

3.3AI score
SaveExploits0References1Affected Software8
UbuntuCve
UbuntuCve
added 2004/10/20 4:00 a.m.35 views

CVE-2004-1381

Firefox before 1.0 and Mozilla before 1.7.5 allow inactive background tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks...

5CVSS6AI score0.06879EPSS
SaveExploits2References2
securityvulns
securityvulns
added 2003/04/18 12:00 a.m.28 views

CrossSite Scripting @ Snitz Forums 2000

Description: The BadWord-Script-Filter can be tricked by adding the Tab-Char 0x09 into the script command. This may lead to CrossSite-Scripting. Exploit: imgjav asc ript:alert28document.cookie29/img Vendor: Has been contacted on 15. April. Patch: Available at...

7.1AI score
SaveExploits0
NVD
NVD
added 2002/12/31 5:00 a.m.23 views

CVE-2002-1925

Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service crash by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module...

5CVSS6.6AI score0.01574EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2002/06/25 4:00 a.m.32 views

CVE-2001-0961

Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most...

7.6AI score0.05544EPSS
SaveExploits0References3
Rows per page
Query Builder