CVE-2011-1738

HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit PDK applications, which allows local users to gain privileges by leveraging unintended filesystem write access...

PT-2011-3337

Name of the Vulnerable Software and Affected Versions HP Palm webOS version 1.4.5 HP Palm webOS version 1.4.5.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For HP...

[security bulletin] HPSBMI02632 SSRT100379 rev.1 - HP/Palm webOS, Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized File System Write Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02822174 Version: 1 HPSBMI02632 SSRT100379 rev.1 - HP/Palm webOS, Execution of Arbitrary Code, Denial of Service DoS, Unauthorized File System Write Access NOTICE: The information in this Securit...

CVE-2011-1738: Undefined Security Weakness

HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit PDK applications, which allows local users to gain privileges by leveraging unintended filesystem write access...

CVE-2011-1737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP Palm webOS security vulnerabilities

Crossite scripting, file system access...

PT-2011-3338

Name of the Vulnerable Software and Affected Versions HP Palm webOS versions 1.4.5 through 1.4.5.1 Description The issue is related to the improper restriction of Plug-in Development Kit PDK applications, allowing local users to gain privileges. This is achieved by leveraging unintended filesyste...

Design/Logic Flaw

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

CVE-2009-5071

CVE-2009-5071 (Palm Pre WebOS before 1.2.1) technical details are not publicly available in the provided documents; monitor for updates.

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

PT-2011-1325

Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions prior to 1.2.1 Description The issue is related to an unspecified vulnerability in an included contact template file, with unknown impact and attack vectors. Recommendations For versions prior to 1.2.1, update to versio...

CVE-2009-5071: Undefined Security Weakness

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

[security bulletin] HPSBMI02614 SSRT100344 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02639302Version: 1 HPSBMI02614 SSRT100344 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon ...

CVE-2010-4109

Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...

CVE-2010-4109

CVE-2010-4109 affects the HP webOS Contacts Application on Palm devices. The issue is a Cross-site Scripting (XSS) vulnerability exploitable via a crafted vCard file, enabling remote execution of arbitrary HTML/JavaScript. HP’s security bulletin and related documents indicate affected software ve...

CVE-2010-4109

Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...

CVE-2010-4109: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...