1327 matches found
Google Chrome < 30.0.1599.66 Multiple Vulnerabilities
Binary data 801606.prm...
bing_spider
This plugin finds new URLs in Bing search engine. One configurable parameters exist: resultlimit This plugin searches Bing for : "site:domain.com", requests all search results and parses them in order to find new URLs. Plugin type Crawl Options Name | Type | Default Value | Description | Help...
RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)
A stack buffer overflow vulnerability exists in RealNetworks RealPlayer. Successful exploitation can result in arbitrary code execution in the context of the currently logged in user...
CVE-2012-3724
CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL...
SquidClamav URL Parsing DoS Vulnerability
SquidClamav is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:darold:squidclamav...
Mandrake Linux Security Advisory : licq (MDKSA-2001:032-1)
Versions of Licq prior to 1.0.3 have a vulnerability involving the way Licq parses received URLs. The received URLs are passed to the web browser without any sanity checking by using the system function. Because of the lack of checks on the URL, remote attackers can pipe other commands with the...
SuSE9 Security Update : clamav (YOU Patch Number 12293)
Various bugs such as an off-by-one buffer overflow in getunicodename , a bug in URL parsing of the 'phishing' checks, as well as minor other issues have been fixed in clamav. CVE-2008-5050 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Vulnerability in RealNetworks Helix Universal Media Server Could Allow Denial of Service
Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting RealNetworks Helix Universal Media Server software version 14.2.0.212 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to...
CVE-2012-0641
CVE-2012-0641 affects CFNetwork in Apple iOS prior to 5.1. Root cause: improper construction of request headers during URL parsing, enabling exposure of sensitive information via a malformed URL. Impact per the advisory: information disclosure. Metrics (NVD) show a network attack vector with low ...
CVE-2011-3447
CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL...
CVE-2011-3447
CFNetwork in Apple OS X 10.7.x before 10.7.3 is affected. The issue arises when parsing URLs, where request headers may be constructed improperly, potentially allowing a remote attacker to obtain sensitive information via a malformed URL. This CVE (CVE-2011-3447) is associated with OS X Lion/CFNe...
CURL-CVE-2012-0036 URL sanitization vulnerability
curl is vulnerable to a data injection attack for certain protocols through control characters embedded or percent-encoded in URLs. When parsing URLs, libcurl's parser is liberal and only parses as little as possible and lets as much as possible through as long as it can figure out what to do. In...
Microsoft Office Web Components URL Parsing Buffer Overflow (MS08-017; CVE-2006-4695)
A buffer overflow vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to improper handling of certain URLs. A remote attacker may exploit this vulnerability by enticing a target user to visit a malicious web-page. Successful exploitation would allow an...
CVE-2011-3246
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...
Code injection
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...
CVE-2011-3246
CVE-2011-3246 affects CFNetwork in Apple iOS (pre-5.0.1) and Mac OS X (pre-10.7.2). The flaw is improper URL parsing, enabling a crafted (http/https) URL to trigger visits to unintended origins and leak cookies. Connected sources confirm the vulnerability is tied to CFNetwork URL handling and is ...
Google Chrome < 13.0.782.215 Multiple Vulnerabilities (Sep 2011) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2822
Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and attack vectors...