7533 matches found
US-CERT Technical Cyber Security Alert TA08-162C -- Apple Quicktime Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-162C Apple Quicktime Updates for Multiple Vulnerabilities Original release date: June 10, 2008 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X running versions of QuickTi...
Adobe Flash player code execution vulnerability
Overview Adobe Flash contains a vulnerability that may allow an attacker to run code on a system that has a vulnerable version of the Flash player installed. There are reports that this vulnerability is being actively exploited. Description The Adobe Flash Player is a player for the Flash media...
Vulnerability in multiple web browsers allowing request spoofing attacks
Overview Multiple web browsers contain a vulnerability in the processing of XmlHttpRequest objects. XmlHttpRequest objects available in JavaScript provide a function to communicate with a server without reloading a web page. In general, JavaScript only allows communication within the same domain ...
MitakeSearch cross-site scripting vulnerability
Overview MitakeSearch, a fulltext search system from Hewlett-Packard Japan, contains a cross-site scripting vulnerability due to improper validation of input character strings in the ranking CGI script file, ranking.pl. Impact A malicious script may be executed on the user's web browser. Solution...
pnamazu cross-site scripting vulnerability
Overview pnamazu, the Perl version program of the full-text search engine Namazu, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
TikiWiki cross-site scripting vulnerability
Overview TikiWiki, one of Wiki clones, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
Microsoft IE 7 DisableCachingOfSSLPages选项失效漏洞
BUGTRAQ ID: 29120 Internet Explorer是微软发行的非常流行的WEB浏览器。 管理员和用户可以在Internet Explorer中设置DisableCachingOfSSLPages选项以防止将私人数据保存到磁盘上，这个选项的注册表项为： HKCUSoftwareMicrosoftWindowsCurrentVersionInternetSettingsDisableCachingOfSSLPages 当启用了这个选项后，Internet Explorer 7仍会将启用了SSL的网页缓存到磁盘上，导致将私人或敏感数据写到磁盘。 Microsoft...
Debian Security Advisory DSA 1570-1 (kazehakase)
The remote host is missing an update to kazehakase announced via advisory DSA 1570-1. OpenVAS Vulnerability Test $Id: deb15701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1570-1 kazehakase Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1570-1 : kazehakase - various
Andrews Salomon reported that kazehakase, a GTK+-based web browser that allows pluggable rendering engines, contained an embedded copy of the PCRE library in its source tree which was compiled in and used in preference to the system-wide version of this library. The PCRE library has been updated ...
[ GLSA 200805-02 ] phpMyAdmin: Information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
DSA-1570-1 kazehakase - execution of arbitrary code
Bulletin has no description...
Microsoft IE 7 popup window address bar URI spoofing vulnerability-vulnerability warning-the black bar safety net
| Affected versions: Microsoft Internet Explorer 7.0 --- Description: BUGTRAQ ID: 2 8 4 9 8 Internet Explorer is Microsoft's release of the very popular WEB browser. If the user use IE to visit a malicious Web page while the pop-up window's address bar may be any address and the window theme to a...
[SECURITY] Fedora 7 Update: midori-0.0.17-3.fc7
Midori is a lightweight web browser, and has many features expected of a modern browser, including: Full integration with GTK+2. Fast rendering with WebKit. Tabs, windows and session management. Bookmarks are stored with XBEL. Searchbox based on OpenSearch. Custom context menu actions. User scrip...
[SECURITY] Fedora 7 Update: WebKit-1.0.0-0.8.svn31787.fc7
WebKit is an open source web browser engine...
Apple Safari多个拒绝服务及欺骗漏洞
BUGTRAQ ID: 28891 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari在处理畸形恶意的JavaScript时存在漏洞，用户访问包含有恶意代码的网页时会导致浏览器崩溃。 在通过document.write写入到同一页面时，无限的while循环可能导致Safari出现以下错误崩溃： Access violation when writing to 0FDFFFEE 如果使用safari打开了file://类链接的话，浏览器可能出现以下错误崩溃： Access violation when reading 00000004...
PR07-44: XSS on RSA Authentication Agent login page
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR07-44: XSS on RSA Authentication Agent login page Vulnerability found: 5th December 2007 Vendor informed: 13th December 2007 Severity: Medium-high Successfully tested on: RSA Authentication Agent 5.3.0.258 for Web for Internet Information Services...
JVN#76788395 Sony mylo COM-2 does not verify server SSL certificate
Sony mylo COM-2, a mobile terminal equipped with a web browser and media palyer, contains a vulnerability where it does not verify the server certificate when connecting to a server via SSL/TLS. Impact Normally, when a client connects to a web server through a SSL/TLS connection, it would verify...
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-7.fc8
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...