3989 matches found
Collabtive 0.4.8 Multiple Vulnerabilities
Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/ Advisory...
googlechrome-check.txt
Google Chrome 0.2.149.30, file type check vulnerability when browsing through ftp. For example, when browsing: ftp://ftp.example.net/picture.jpg or it could be .txt, .pdf, etc... Google Chrome does not check the file type. When browsing only ftp://ftp.example.net/ you will see the picture.jpg fil...
firefox-check.txt
Mozilla Firefox 3.0.1, file type check vulnerability when browsing through ftp. For example, when browsing: ftp://ftp.example.net/picture.jpg or it could be .txt, .pdf, etc... Mozilla Firefox does not check the file type. When browsing only ftp://ftp.example.net/ you will see the picture.jpg file...
opera -- multiple vulnerabilities
Opera reports: Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...
[SECURITY] Fedora 8 Update: galeon-2.0.4-5.fc8.3
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
[SECURITY] Fedora 8 Update: yelp-2.20.0-10.fc8
Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...
Hacking the network of fifty-ways-vulnerability warning-the black bar safety net
Now online the attacks more and more, hackers are by what method to attack US? Below we give you a summary of the hacking network of fifty ways, and let everyone do better safe than sorry. 1. Network a wide network Co., Ltd. production site basic have injection vulnerabilities search network wide...
Wayport Public Access PC Authentication Bypass Weakness
Application: Wayport Public Access PC Vendor: http://www.wayport.net Bug: Authorisation Bypass Risk: High Date: 8 April 2008 Author: Pascal Cretain e-mail: Pascal.Cretain at Gmail dot com List: BugTraq SecurityFocus ======= Product ======= Wayport's Public Access PC === Bug === There is an...
It's possible to browse project names when using Issue Security Scheme.
A customer user is set up and only allowed to see "External" issues. - The user is added as project role "Customers" in project "X". - The project got Issue Security Scheme "Customers". Internal / External When logging in as the customer user, you can only see the External issues within this...
openSUSE 10 Security Update : epiphany (epiphany-5102)
The Mozilla XULRunner 1.8.1 engine was updated to security update version 1.8.1.12. This includes fixes for the following security issues : - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain text files - MFSA...
SA-2008-019 - Refine by Taxonomy - Cross site scripting
Refine by Taxonomy is a module that provides a taxonomy browsing user interface. Taxonomy terms are not escaped before display, making it possible to inject arbitrary HTML and script code into pages which contain the Refine by Taxonomy feature. This may lead to administrator access if certain...
FreeBSD : mozilla -- multiple vulnerabilities (810a5197-e0d9-11dc-891a-02061b08fc24)
The Mozilla Foundation reports of multiple security issues in Firefox, SeaMonkey, and Thunderbird. Several of these issues can probably be used to run arbitrary code with the privilege of the user running the program. - Web forgery overwrite with div overlay - URL token stealing via stylesheet...
openSUSE 10 Security Update : seamonkey (seamonkey-5012)
This update brings Mozilla SeaMonkey to security update version 1.8.1.12 Following security problems were fixed : - MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div overlay - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of...
Mozilla Foundation Security Advisory 2008-06
Mozilla Foundation Security Advisory 2008-06 Title: Web browsing history and forward navigation stealing Impact: Critical Announced: February 7, 2008 Reporter: David Bloom Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 SeaMonkey 1.1.8 Description Mozilla contributor David...
Mozilla Firefox < 2.0.0.12 Multiple Vulnerabilities
Binary data 4365.prm...
Web browsing history and forward navigation stealing — Mozilla
Mozilla contributor David Bloom reported a vulnerability in the way images are treated by the browser when a user leaves a page which utilizes designMode frames. The reported issue can be used to steal a user's navigation history, forward navigation information, and crash the user's browser. The...
Debian Security Advisory DSA 1064-1 (cscope)
The remote host is missing an update to cscope announced via advisory DSA 1064-1. Jason Duell discovered that cscope, a source code browsing tool, does not verify the length of file names sourced in include statements, which may potentially lead to the execution of arbitrary code through speciall...
Debian Security Advisory DSA 1186-1 (cscope)
The remote host is missing an update to cscope announced via advisory DSA 1186-1. Will Drewry of the Google Security Team discovered several buffer overflows in cscope, a source browsing tool, which might lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb11861.nasl 6616...
Debian: Security Advisory (DSA-1186-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ZeusCMS <= 0.3 Remote Blind SQL Injection Exploit
No description provided by source. ? / ------------------------------------------------- ZeusCMS = 0.3 Remote Blind SQL Injection Exploit ------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.zeuscms.gr/ details..: works with...