JVN#64625488: applican vulnerable to script injection

applican provided by Newphoria Corporation Inc. is a platform to build hybrid applications for both iOS and Android. applican is vulnerable to script injection due to an issue in proccessing URL. Impact When a user accesses a specially crafted URL through an application built using applican, an...

CVE-2014-8488

The CVE-2014-8488 entry is corroborated by connected advisories showing Fedora updates for yourls 1.7 (e.g., FEDORA-2015-5965/5972) addressing an XSS in the administrator panel via the Shorten functionality. Affected product: YOURLS (PHP-based URL shortening) software package 1.7; vulnerability t...

Orbit Downloader Long URL Stack Buffer Overflow - Ver2 (CVE-2009-0187)

Orbit Downloader, developed by Orbit Downloader Team, is a graphical download manager for Microsoft Windows operating system. Orbit Downloader works with all major browsers like Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, and Netscape. A buffer overflow vulnerability exists in...

Foxit Reader Plugin URL Processing Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Foxit Reader Plug...

Foxit Reader PDF File Handling Memory Corruption Vulnerability

Foxit Reader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

CVE-2010-3497

Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that...

Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513...

Opera URL Processing Arbitrary Code Execution Vulnerability - Windows

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera URL Processing Arbitrary Code Execution Vulnerability - Mac OS X

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

Cisco Content Delivery System DoS

Internet Streamer URL processing crash...

VMware View 3.1.x - URL Processing Cross-Site Scripting

VMware View 3.1.x - URL Processing Cross-Site Scripting source: https://www.securityfocus.com/bid/39949/info VMware View is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

ffdshow Codec Media Stream URL Processing Buffer Overflow (CVE-2008-5381)

ffdshow is a popular all-in-one codec for many video and audio file and stream formats, including Xvid, H.264, MPEG, AAC, Vorbis, AC3, DTS and others. It is an open source software released under the terms of GNU General Public License version 2 and is implemented as directShow filter and VFW...

Orbit Downloader Download Argument Processing Stack Buffer Overflow (CVE-2008-1602)

There exists a buffer overflow vulnerability in Orbit Downloader. The vulnerability is caused due to insufficient boundary checking when the application processes the URL string. An attacker may exploit this vulnerability by enticing a target user to open a malicious long URL. Successful...

Apple iTunes Protocol Handler Stack Buffer Overflow (CVE-2009-0950)

Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files. When iTunes is installed, it registers itself with the host Operating System as a protocol handler for several application URL schemes. A buffer overflow...

Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Processing Buffer Overflow Exploit meta ============================================================ greendamurl.rb Green Dam URL Processing Buffer Overflow...

thunderbird security update

CentOS Errata and Security Advisory CESA-2009:0002 Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...

Moderate: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws...

RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...