CVE-2013-1723

CVE-2013-1723 affects Mozilla Firefox (before 24.0), Thunderbird (before 24.0) and SeaMonkey (before 2.21). The NativeKey widget processes key messages after destruction by a dispatched event listener, enabling a denial of service (application crash) via incorrect event usage after widget-memory ...

CVE-2013-1723

The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service application crash by leveraging incorrect event usage after...

Mozilla Thunderbird < 24.0

Binary data 8011.prm...

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin allows you to add, delete, edit and place what others said about...

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin...

CVE-2013-2209

Cross-site scripting XSS vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

The CVE-2013-2704 entry concerns the WordPress plugin Dropdown Menu Widget (version 1.9.1). The vulnerability is described as a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of arbitrary users for requests that insert Cross-Site Scripting (XSS) sequen...

CVE-2013-2704: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

Fedora Update for kdelibs3 FEDORA-2013-8689

Check for the Version of kdelibs3 OpenVAS Vulnerability Test Fedora Update for kdelibs3 FEDORA-2013-8689 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DIF Log Search Widget 1.0e Cross Site Scripting Vulnerability

ADIF Log Search Widget version 1.0e suffers from a cross site scripting vulnerability. Exploit Title: ADIF Log Search Widget XSS Arbitrary Vulnerability Date: 26/05/13 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/plugins/adif-log-search-widget/ Software Link:...

ADIF Log Search Widget 1.0e Cross Site Scripting

Exploit Title: ADIF Log Search Widget XSS Arbitrary Vulnerability Google Dork: Date: 26/05/13 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/plugins/adif-log-search-widget/ Software Link: http://wordpress.org/plugins/adif-log-search-widget/ Version: 1.0e Tested on: Ubuntu 12.04....

Google Chrome < 27.0.1453.93 Multiple Vulnerabilities

Binary data 800944.prm...

CVE-2013-2311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross-site scripting vulnerability in the web2py social bookmarking widget

Overview The social bookmarking widget share.js in web2py contains a cross-site scripting vulnerability. web2py is a framework for creating and designing web applications. The social bookmarking widget in web2py contains a cross-site scripting vulnerability. Yuji Kosuga of Everforth Co., Ltd...

JVN#10461119: Cross-site scripting vulnerability in the web2py social bookmarking widget

web2py is a framework for creating and designing web applications. The social bookmarking widget in web2py contains a cross-site scripting vulnerability. Impact A user who accesses a site created by web2py which uses share.js may have an arbitrary script executed on its web browser. Solution Upda...

CVE-2013-1949

Social Media Widget social-media-widget plugin 4.0 for WordPress contains an externally introduced modification Trojan Horse, which allows remote attackers to force the upload of arbitrary files...

CVE-2013-1949

Social Media Widget social-media-widget plugin 4.0 for WordPress contains an externally introduced modification Trojan Horse, which allows remote attackers to force the upload of arbitrary files...