CVE-2005-2327: Undefined Security Weakness

Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...

Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...

Microsoft Windows Color Management module buffer overflow

Buffer overflow during ICC tags processing in different graphics formats, including JPEG...

CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

CVE-2005-1219

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags...

CVE-2005-1219: Undefined Security Weakness

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags...

CVE-2005-2161

Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...

CVE-2005-2161: Undefined Security Weakness

Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...

phpBB < 2.0.17 Nested BBCode URL Tags XSS

According to its banner, the remote host is running a version of phpBB that fails to sanitize BBCode containing nested URL tags, which enables attackers to cause arbitrary HTML and script code to be executed in a user's browser within the context of the affected site. %NASLMINLEVEL 70300 C Tenabl...

CVE-2002-1901

Cross-site scripting XSS vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags...

Fedora Core 4 2005-409: elinks

The remote host is missing the patch for the advisory FEDORA-2005-409 elinks. Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage over graphical browsers is its speed--Links starts and exits quickly an...

CVE-2002-1901: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags...

Fedora Core 2 : ImageMagick-6.2.0.7-2.fc2 (2005-234)

Andrei Nigmatulin discovered a heap based buffer overflow flaw in the ImageMagick image handler. An attacker could create a carefully crafted Photoshop Document PSD image in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities...

CVE-2004-2015

CVE-2004-2015 is an XSS vulnerability in WebCT Campus Edition. The issue allows remote attackers to inject arbitrary HTML or web script through iframe, img, or object tags. The available documents confirm the affected product and the vulnerable vectors but do not specify root cause details beyond...

CVE-2004-1827

CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...

CVE-2004-2015: Undefined Security Weakness

Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...

DEBIAN-CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-1068

Cross-site scripting XSS vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via url tags...

CVE-2004-1121

The provided data confirms CVE-2004-1121 affects Apple Safari 1.0 through 1.2.3. The vulnerability allows a remote attacker to spoof the URL displayed in the status bar by exploiting TABLE tags in the page, potentially misleading users about the address they are visiting. Based on the connected d...