CVE-2005-0752

The Plugin Finder Service PFS in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag...

CVE-2005-0752

The Plugin Finder Service PFS in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag...

IBM WebSphere JSP Source Disclosure / XSS Vulnerabilities

Binary data 2825.prm...

CVE-2005-1008

CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...

CVE-2005-0945

Cross-site scripting XSS vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in 1 img, 2 link, or 3 mail tags...

ASP-DEV XM Forum RC3 - IMG Tag Script Injection

ASP-DEV XM Forum RC3 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script...

ASP-DEV XM Forum RC3 - IMG Tag Script Injection

source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser. XM Forum RC3 is report...

ACSblog111.txt

These vulnerabilities have been tested on the latest version of ACS Blog. v1.1.1 In the comments section of ACS Blog, it is possible to execute an XSS attack through the link, mail, and img tags, due to lack of filtering of single quotes and spaces inside the tags. Examples/PoCs:...

[Full-disclosure] [ GLSA 200503-34 ] mpg321: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200503-34 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-0418

CVE-2005-0418 is an argument-injection vulnerability in Java Web Start for J2SE 1.4.2 (up to 1.4.2_06) on Mac OS X. The flaw allows an untrusted JNLP file to inject values via a property tag, enabling privilege escalation. Connected entries also reference CVE-2005-0836, which describes a related ...

security flaw

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

DEBIAN-CVE-2005-0759

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

CVE-2005-0759

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

CVE-2005-0836

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...

CVE-2001-1421

AOL Instant Messenger (AIM) versions up to 4.7 are affected. The vulnerability arises when processing a benign-looking input consisting of a large number of different fonts followed by an HTML HR tag, which can trigger a remote denial of service resulting in an application crash. The affected pro...

phpweblog053.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: phpWebLog Version: ,,,,,,,,"; Are we developing? $GDEBUG = false; Number of seconds to hold cache $GCACHE = 10; phpWebLog version $GVER = "0.5.3"; ... /== include libraries/functions =========================================/...

Mozilla SuiteFirefoxThunderbird - Nested Anchor Tag Status Bar Spoofing

Mozilla SuiteFirefoxThunderbird - Nested Anchor Tag Status Bar Spoofing source: https://www.securityfocus.com/bid/12798/info Mozilla Suite/Firefox and Thunderbird are reported prone to a URI obfuscation weakness. The issue is reported to manifest when 'Save Link As...' functionality is invoked on...

Mozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar Spoofing

source: https://www.securityfocus.com/bid/12798/info Mozilla Suite/Firefox and Thunderbird are reported prone to a URI obfuscation weakness. The issue is reported to manifest when 'Save Link As...' functionality is invoked on an malicious anchor tag. This issue may be leveraged by an attacker to...

PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities

PhotoPost 5.0RC3, All Enthusiast, Inc, multiple vulnerabilities March 05 2005 For your consideration. 1. BACKGROUND PhotoPost is a popular commercial image publishing software. Everyone loves showing off their photos! Add PhotoPost to your site, or let us install it for you, and your visitors wil...

libexif: Buffer overflow vulnerability

Background libexif is a library for parsing, editing and saving EXIF data. Description libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause applications linked to libexif to cras...