641 matches found
CVE-2013-6486
CVE-2013-6486 concerns Pidgin on Windows (PIDGIN, before version 2.10.8). The issue occurs in gtkutils.c where a message containing a file: URL is improperly handled during construction of an explorer.exe command, allowing a user‑assisted remote attacker to execute arbitrary programs. This vulner...
JVN#23256725: Opera browser for Android issue in handling intent scheme URL's
Opera browser for Android contains an issue in the handling of intent scheme URL's. Impact When a user views a specially crafted page, the Opera browser for Android cookie file may be disclosed. Solution Apply an Update Apply the appropriate update for the version of the software being used...
Pidgin < 2.10.8 Multiple Vulnerabilities
The version of Pidgin installed on the remote host is a version prior to 2.10.8. It is, therefore, potentially affected by the following vulnerabilities : - The bundled version of Pango has an error that can lead to an application crash when rendering fonts and attempting to display certain Unico...
Pidgin for Windows URL Handling Remote Code Execution Vulnerability
Talos Vulnerability Report VRT-2013-1003 Pidgin for Windows URL Handling Remote Code Execution Vulnerability January 26, 2014 CVE Number CVE-2013-6486 Description An exploitable remote code execution vulnerability exists in Pidgin’s implementation of HTTP URL handling. An attacker can supply a...
MGASA-2013-0360 Updated subversion package fixes security vulnerabilities
moddontdothat allows you to block update REPORT requests against certain paths in the repository. It expects the paths in the REPORT request to be absolute URLs. Serf based clients send relative URLs instead of absolute URLs in many cases. As a result these clients are not blocked as configured b...
Safari < 6.1 Multiple Security Vulnerabilities
Binary data 8048.prm...
Mac OS X : Apple Safari < 6.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.1. It is, therefore, potentially affected by several issues : - A bounds-checking issue exists related to handling XML files. CVE-2013-1036 - Multiple memory corruption vulnerabilities exist in WebKit...
OTRS ITSM Ticket Split Information Disclosure Vulnerability
Open Ticket Request System OTRS and OTRS:ITSM are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Hiawatha < 3.6 URL Handling Weakness
According to its server response header, the installed version of Hiawatha is a version prior to 3.6. A flaw exists in the handling of malicious characters within URLs that has an unspecified impact. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69037;...
Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)
Binary data 6857.prm...
Microsoft Windows Essentials information leakage
Microsoft Writer invalid URL handling...
JVN#45306814: EC-CUBE fails to restrict access permissions
EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a URL handling issue in certain environments and as a result, access permissions are not restricted. Impact A remote, unauthenticated attacker may access the management screen. Solution Apply th...
Design/Logic Flaw
Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs aka APIPermission::kTab permission before providing a URL to this extension, which has unspecified impact and remote attack vectors...
CVE-2013-1857
The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...
Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...
fileutils Gem for Ruby file_utils.rb Crafted URL Handling Remote Command Execution
fileutils Gem for Ruby contains a flaw in fileutils.rb. The issue is triggered when handling a specially crafted URL containing a command after a delimiter ;. This may allow a remote attacker to potentially execute arbitrary commands...
Google Chrome < 25.0.1364.97 Multiple Vulnerabilities
Binary data 800930.prm...
Opera < 12.12 Multiple Vulnerabilities
Binary data 800107.prm...