3592 matches found
Mozilla Foundation Security Advisory 2008-62
Mozilla Foundation Security Advisory 2008-62 Title: Additional XSS attack vectors in feed preview Impact: Critical Announced: December 16, 2008 Reporter: mozbugra4 Products: Firefox Fixed in: Firefox 2.0.0.19 Description Mozilla security researcher mozbugra4 reported an additional variation on th...
Design/Logic Flaw
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...
PYSEC-2008-6
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."...
PYSEC-2008-7
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...
enscript: "font" special escape buffer overflows
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence...
enscript: "font" special escape buffer overflows
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence...
CVE-2008-5244
Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad...
CVE-2008-5173
Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors...
Code injection
Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors...
CVE-2008-5096
Unspecified vulnerability in the TYPO3 File List filelist extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors...
CVE-2008-4306
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence...
CVE-2008-4868
Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...
CVE-2008-4868
Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...
Information disclosure
Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknown impact and attack vectors related to "Active" content. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4809
Technical details for CVE-2008-4809 are not publicly available in the provided documents. No concrete affected products/versions or exploits are listed. Monitor for updates.
Code injection
Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors...
CVE-2008-4731
Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors...
CVE-2008-4731
Technical details for CVE-2008-4731 are not publicly available in the provided documents; no affected products, versions, or fixes are disclosed. Monitor for updates.
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...