Home Web Server Graphical User Interface Remote Denial Of Service Vulnerability

According to its version number, the remote version of the Home Web Server is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. Attackers can exploit this issue to cause the graphical interface of the server to stop responding, denying servi...

Firefox XUL garbage collection issue (cansecwest pwn2own)

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009...

Fedora Update for licq FEDORA-2008-3969

Check for the Version of licq OpenVAS Vulnerability Test Fedora Update for licq FEDORA-2008-3969 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2008-6125

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2008-6125

CVE-2008-6125 affects Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3. It is described as an unspecified vulnerability in the user editing interface that allows remote authenticated users to gain privileges via unknown vectors. The NVD listing provides CVSSv2 base score 6.5 (MEDIUM) with net...

typo3 -- cross-site scripting and information disclosure

Secunia reports: Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information. Input passed via unspecified fields to the backend user interface is not properly sanitised before being return...

PT-2009-2954 · Tftputil · Tftputil Gui

Name of the Vulnerable Software and Affected Versions: TFTPUtil GUI versions 1.2.0 through 1.3.0 Description: A directory traversal issue allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request, such as "/../" or "/../../"...

Firefox 3 User tracking via XUL persist attribute

Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies...

Design/Logic Flaw

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

Unfixed XSS vulnerability at www.ieee-earth.org

Security researcher xylitol, has submitted on 26/10/2008 a cross-site-scripting XSS vulnerability affecting www.ieee-earth.org, which at the time of submission ranked 4072221 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.

Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla firefox is vulnerable to user interface event dispatcher null pointer...

Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.

Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla firefox is vulnerable to user interface event dispatcher null pointer...

CVE-2008-4324

The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it was later reported th...

CVE-2008-4324

CVE-2008-4324 affects Mozilla Firefox 3.0.3 on Windows XP SP2, with reports also noting Firefox 3.0.2 on Mac OS X 10.5. The vulnerability is a denial of service caused by a NULL pointer dereference in the user interface event dispatcher, triggered by a sequence of UI events (keypress, click, onke...

Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash

No description provided by source. ========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/...

firefoxderef-dos.txt

========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla...

Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash

Exploit for unknown platform in category dos / poc =================================================================== Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash ===================================================================...

Mozilla Firefox 3.0.3 - User Interface Null Pointer Dereference Crash

========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla...

[SECURITY] Fedora 9 Update: licq-1.3.5-2.fc9

Licq is a ICQ Client for the common ICQ network. It provides a graphical user interface based on QT and is enhanceable with many powerful plugins. For more information visit Licq's Homepage http://www.licq.org...

[SECURITY] Fedora 9 Update: xemacs-packages-extra-20070427-2.fc9

XEmacs is a highly customizable open source text editor and application development system. It is protected under the GNU General Public License and related to other versions of Emacs, in particular GNU Emacs. Its emphasis is on modern graphical user interface support and an open software...