CVE-2008-6125

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2008-6125

CVE-2008-6125 affects Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3. It is described as an unspecified vulnerability in the user editing interface that allows remote authenticated users to gain privileges via unknown vectors. The NVD listing provides CVSSv2 base score 6.5 (MEDIUM) with net...

typo3 -- cross-site scripting and information disclosure

Secunia reports: Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information. Input passed via unspecified fields to the backend user interface is not properly sanitised before being return...

PT-2009-2954 · Tftputil · Tftputil Gui

Name of the Vulnerable Software and Affected Versions: TFTPUtil GUI versions 1.2.0 through 1.3.0 Description: A directory traversal issue allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request, such as "/../" or "/../../"...

Firefox 3 User tracking via XUL persist attribute

Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies...

Design/Logic Flaw

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

Unfixed XSS vulnerability at www.ieee-earth.org

Security researcher xylitol, has submitted on 26/10/2008 a cross-site-scripting XSS vulnerability affecting www.ieee-earth.org, which at the time of submission ranked 4072221 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.

Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla firefox is vulnerable to user interface event dispatcher null pointer...

Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.

Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla firefox is vulnerable to user interface event dispatcher null pointer...

CVE-2008-4324

The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it was later reported th...

CVE-2008-4324

CVE-2008-4324 affects Mozilla Firefox 3.0.3 on Windows XP SP2, with reports also noting Firefox 3.0.2 on Mac OS X 10.5. The vulnerability is a denial of service caused by a NULL pointer dereference in the user interface event dispatcher, triggered by a sequence of UI events (keypress, click, onke...

firefoxderef-dos.txt

========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla...

Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash

No description provided by source. ========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/...

Mozilla Firefox 3.0.3 - User Interface Null Pointer Dereference Crash

========================================================================== Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla...

Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash

Exploit for unknown platform in category dos / poc =================================================================== Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash ===================================================================...

[SECURITY] Fedora 9 Update: licq-1.3.5-2.fc9

Licq is a ICQ Client for the common ICQ network. It provides a graphical user interface based on QT and is enhanceable with many powerful plugins. For more information visit Licq's Homepage http://www.licq.org...

[SECURITY] Fedora 9 Update: xemacs-packages-extra-20070427-2.fc9

XEmacs is a highly customizable open source text editor and application development system. It is protected under the GNU General Public License and related to other versions of Emacs, in particular GNU Emacs. Its emphasis is on modern graphical user interface support and an open software...

F5 FirePass Content Inspection Management XSS

F5 FirePass Content Inspection Management XSS Product: F5 FirePass http://www.f5.com/products/firepass/ The F5 FirePass SSL VPN appliance provides rudimentary web request sanitization for resources exposed through the appliance via Portal Access. This Content Inspection feature can be configured...

Design/Logic Flaw

Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors...

[SECURITY] Fedora 7 Update: licq-1.3.4-8.fc7

Licq is a ICQ Client for the common ICQ network. It provides a graphical user interface based on QT and is enhanceable with many powerful plugins. For more information visit Licq's Homepage http://www.licq.org...