Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an...

US-CERT Technical Cyber Security Alert TA04-293A -- Multiple Vulnerabilities in Microsoft Internet Explorer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA04-293A Multiple Vulnerabilities in Microsoft Internet Explorer Original release date: October 19, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems running...

Microsoft Internet Explorer Secure Sockets Layer Caching Vulnerability

Description Microsoft Internet Explorer is reported prone to a Secure Sockets Layer caching vulnerability. It is reported that arbitrary content may be cached to the computer that is viewing a malicious site when this vulnerability is exploited. This cached content will be rendered in the context...

Fedora Core 1 : kdelibs-3.1.4-7 (2004-290)

Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerabilit...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be...

kdelibs -- konqueror cross-domain cookie injection

According to a KDE Security Advisory: WESTPOINT internet reconnaissance services alerted the KDE security team that the KDE web browser Konqueror allows websites to set cookies for certain country specific secondary top level domains. Web sites operating under the affected domains can set HTTP...

Opera Web Browser 7.23 - JavaScript Denial of Service

Opera Web Browser 7.23 - JavaScript Denial of Service source: https://www.securityfocus.com/bid/10997/info Opera Web Browser is reported prone to a JavaScript denial-of-service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. When...

Opera Web Browser 7.23 - JavaScript Denial of Service

source: https://www.securityfocus.com/bid/10997/info Opera Web Browser is reported prone to a JavaScript denial-of-service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. When executing this command, Opera will reportedly crash. This...

Opera Web Browser < 7.5.4 Multiple Vulnerabilities

Binary data 1243.prm...

iCab Web Browser Remote Window Hijacking

Binary data 2530.prm...

Opera Web Browser Version Detection

Binary data 8055.prm...

Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

CVE-2004-0539

The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code...

Mozilla SOAPParameter Object Constructor Overlow

The Mozilla web browser is installed on the remote host. The remote version of this software has an integer overflow vulnerability in the SOAPParameter object constructor. This could result in arbitrary code execution. A remote attacker could exploit this flaw by tricking a user into viewing a...

Opera Web Browser 7.53 - Location Replace URI Obfuscation

Opera Web Browser 7.53 - Location Replace URI Obfuscation source: https://www.securityfocus.com/bid/10810/info Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information. This issue is due to a race condition error. This issue may be...

Opera Web Browser 7.53 - Location Replace URI Obfuscation

source: https://www.securityfocus.com/bid/10810/info Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information. This issue is due to a race condition error. This issue may be leveraged by an attacker to display false information in the...

CVE-2004-0718

The CVE-2004-0718 entry covers a frame-injection vulnerability affecting multiple browsers (Mozilla 1.6, Firebird 0.7, Firefox 0.8, Netscape 7.1) where a frame from one domain injects content into a frame in another domain, facilitating web-site spoofing and related attacks. The Connected documen...

CuteNews 1.3.1 - show_archives.php Cross-Site Scripting

CuteNews 1.3.1 - showarchives.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue...

Opera Web Browser 7.5x - IFrame OnLoad Address Bar URL Obfuscation

source: https://www.securityfocus.com/bid/10679/info Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information. It is currently not known if this issue is related to the Opera Web Browser Address Bar Spoofing Weakness reported in BID...