5411 matches found
CVE-2001-0520
CVE-2001-0520 affects Aladdin eSafe Gateway versions 3.0 and earlier. The vulnerability allows a remote attacker to bypass filtering of SCRIPT tags by embedding scripts within certain HTML constructs (e.g., onload in BODY, href in A, BUTTON, INPUT, or other tag-defined scripts). The NVD entry lis...
CVE-2001-0520
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including 1 onload in the BODY tag, 2 href in the A tag, 3 the BUTTON tag, 4 the INPUT tag, or 5 any other tag in which scripts can be...
CVE-2001-0520: Undefined Security Weakness
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including 1 onload in the BODY tag, 2 href in the A tag, 3 the BUTTON tag, 4 the INPUT tag, or 5 any other tag in which scripts can be...
Microsoft Internet Explorer 3/4/5 / Netscape Communicator 4 - IMG Tag Denial of Service
source: https://www.securityfocus.com/bid/3122/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. Multiple malicious IMG tags may cause a denial of services to users who view webpages they are embedded into. Any medium which allows web...
Microsoft Internet Explorer 345 Netscape Communicator 4 - IMG Tag Denial of Service
Microsoft Internet Explorer 345 Netscape Communicator 4 - IMG Tag Denial of Service source: https://www.securityfocus.com/bid/3122/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. Multiple malicious IMG tags may cause a denial of...
CVE-1999-0760
Technical details about CVE-1999-0760 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor pages to obtain affected products, impact, and remediation information.
CVE-1999-0760
Undocumented ColdFusion Markup Language CFML tags and functions in the ColdFusion Administrator allow users to gain additional privileges...
CVE-2001-1416
Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...
CVE-2000-0898: Undefined Security Weakness
Small HTTP Server 2.01 does not properly process Server Side Includes SSI tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file...
Advisory: Gaim remote vulnerability
Author: Stan Bubrouski [email protected] Date: November 9, 2000 Package: Gaim Versions affected: 0.10.3 current and previous 0.10.x versions. Severity: A remote user could potentially execute shell code as the user Gaim is running as. Problem:There is a buffer overflow in Gaim's parsing of HTML ta...
CVE-2000-0116
The CVE-2000-0116 entry affects Firewall-1. The vulnerability arises from insufficient filtering of script tags; attackers can bypass the Strip Script Tags restriction by prefixing an extra
CVE-2000-0596: Undefined Security Weakness
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability...
CVE-2000-0116: Undefined Security Weakness
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
CVE-2000-0236: Undefined Security Weakness
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
win98-bluescreen.txt
=-= Next Generation of Windows 98 Blues Screen 2 =-= By RUBINHOC from BraZiL Original exploit found by www.securax.org Only for: ruindows 98 maybe 95 too. Techniques: NEW - Infernal Pulse 03/17/2000 =-= WIN98 webservers =-= customized by RUBINHOC rubinhoc:roottelnet victim.com 80 Trying x.x.x.x...
winreal.6-7.txt
Win32 Realplayer 6/7 Buffer Overflow Vulnerability Summary: ---------------------- There is a buffer overflow in the Win32 RealPlayer Basic client, versions 6 and 7. This appears to occur when 299 characters are entered as a 'location' to play, such as http://aaaaa..... with 300 a's. I have teste...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
fw1_script.tags.txt
Hi all, The "Strip Script Tags" in FW-1 can be circumvented by adding an extra tag like in this code: alert"hello world" test This code will pass unchanged, and still execute in both Navigator and Explorer. I tried this on version 3.0 of FW-1 on Windows NT 4.0 but I'm not able to check it on...