Debian Security Advisory DSA 3298-1 (jackrabbit - security update)

It was discovered that the Jackrabbit WebDAV bundle was susceptible to a XXE/XEE attack. When processing a WebDAV request body containing XML, the XML parser could be instructed to read content from network resources accessible to the host, identified by URI schemes such as https or file. Dependi...

Debian DSA-3298-1 : jackrabbit - security update

It was discovered that the Jackrabbit WebDAV bundle was susceptible to a XXE/XEE attack. When processing a WebDAV request body containing XML, the XML parser could be instructed to read content from network resources accessible to the host, identified by URI schemes such as'https' or 'file'...

Fedora 15 : python-feedparser-5.0.1-1.fc15 (2011-4988)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Ubuntu USN-782-1 (thunderbird)

The remote host is missing an update to thunderbird announced via advisory USN-782-1. OpenVAS Vulnerability Test $Id: ubuntu7821.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7821.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-782-1 thunderbird Authors:...

Ubuntu USN-764-1 (xulrunner-1.9)

The remote host is missing an update to xulrunner-1.9 announced via advisory USN-764-1. OpenVAS Vulnerability Test $Id: ubuntu7641.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7641.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-764-1 xulrunner-1.9 Author...

Debian Security Advisory DSA 1396-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 1396-1. OpenVAS Vulnerability Test $Id: deb13961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1396-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities

Background Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite. Description Multiple vulnerabilities have been reported in Mozilla Firefox and SeaMonkey. Various errors in the browser engine and the Javascript engine can be exploited to...

DSA-1401-1 iceape - several vulnerabilities

Bulletin has no description...

DSA-1396-1 iceweasel

Bulletin has no description...

Debian DSA-1392-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1095 Michal Zalewski discovered that the unload event handler had access to the address of...

[SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1392-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20th, 2007 http://www.debian.org/security/faq -...

DSA-1392-1 xulrunner - several vulnerabilities

Bulletin has no description...

URIs with invalid %-encoding mishandled by Windows — Mozilla

On Windows XP with Internet Explorer 7 installed several "web related" URI schemes do not launch the registered protocol-handler if the URI contains an invalid %-encoded sequence. This was initially reported by Billy Rios and Nate McFeters with additional investigation by Secunia. A patch that...