205 matches found
CVE-2007-3110
Technical details for CVE-2007-3110 are not publicly available in the provided documents. Monitor for updates from official advisories; current records reiterate an XSS issue in the Beatnik 1.0 Firefox extension via RSS, without specifics.
CVE-2007-3110
Cross-site scripting XSS vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3110: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Fizzle : Firefox Extension Vulnerability
Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus becomes and so forth. Various feeds fields are vulnerable including the title which allows th...
CVE-2006-4089: Undefined Security Weakness
Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service application crash, or have other unknown impact, via 1 a long Location field sent by a web server, which triggers an overflow in the reconnect function in...