IBM Lotus Notes 8.5 RSS Widget crossite scripting

Scripting in local host zone is possible...

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation scip AG Vulnerability ID 4021 09/08/2009 http://www.scip.ch/?vuldb.4021 I. INTRODUCTION Lotus Notes is a client-server, collaborative application developed and sold by IBM Software Group. More information is available on the official product web...

CVE-2009-3114: Improper Control of Generation of Code

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

Fedora Core 10 FEDORA-2009-8288 (perl-Gtk2-MozEmbed)

The remote host is missing an update to perl-Gtk2-MozEmbed announced via advisory FEDORA-2009-8288. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

[SECURITY] Fedora 10 Update: perl-Gtk2-MozEmbed-0.08-6.fc10.4

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 11 Update: hulahop-0.4.9-7.fc11

The hulalop library contains a widget for embedding mozilla. It's based on pyxpcom and give access to the whole mozilla xpcom API through python...

[SECURITY] Fedora 11 Update: perl-Gtk2-MozEmbed-0.08-6.fc11.4

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 11 Update: perl-Gtk2-MozEmbed-0.08-6.fc11.3

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-30.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

[SECURITY] Fedora 10 Update: perl-Gtk2-MozEmbed-0.08-6.fc10.2

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 10 Update: perl-Gtk2-MozEmbed-0.08-5.fc10.2

This module allows you to use the Mozilla embedding widget from Perl...

Adgregate ShopAd widget validation is vulnerable to replay attack

Adgregate is a "TechCrunch 50" startup that recently signed a distribution deal with Google/DoubleClick 1. As a service, they offer a "viral widget" intended to be hosted on untrusted third-party sites through which consumers can enter their credit card information. According to their website, th...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-27.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-27.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery

The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-26.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

CentOS Update for expect CESA-2008:0134 centos3 x86_64

Check for the Version of expect OpenVAS Vulnerability Test CentOS Update for expect CESA-2008:0134 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for expect CESA-2008:0134 centos3 i386

Check for the Version of expect OpenVAS Vulnerability Test CentOS Update for expect CESA-2008:0134 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...