10594 matches found
Mozilla Thunderbird < 2.0.0.18 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - The canvas element can be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from...
SeaMonkey < 1.1.13 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 1.1.13. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - The canvas element can be used in conjunction with a...
Firefox < 2.0.0.18 Multiple Vulnerabilities
The installed version of Firefox is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - The canvas element can be used in conjunction with a...
Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18) — Mozilla
Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be...
CVE-2008-4998
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...
CVE-2008-4868
Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...
CVE-2008-4654
Stack-based buffer overflow in the parsemaster function in the Ty demux plugin modules/demux/ty.c in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value...
activeportail-xss.txt
+================================================================================================+ + ActivePortail - Copyright AGIIR Network 2007/2008 & XSS - Remote Java Inclusion + +================================================================================================+ Authors: Ivan...
orbamic-xss.txt
+==========================================================================================+ + Copyright 2004/2008 - Orbamic & XSS - Remote Java Inclusion + +==========================================================================================+ Authors: Ivan Sanchez Product: © 2008 BAM -...
DoS vulnerability in Opera
Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Opera. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/Opera20DoS20Exploit3.html Уязвима версия Ope...
Mozilla Foundation Security Advisory 2008-42
Mozilla Foundation Security Advisory 2008-42 Title: Crashes with evidence of memory corruption rv:1.9.0.2/1.8.1.17 Impact: Critical Announced: September 23, 2008 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbi...
Mozilla Firefox < 3.0.2 Multiple Vulnerabilities
Binary data 4691.prm...
Gentoo Security Advisory GLSA 200406-20 (Openswan)
The remote host is missing updates announced in advisory GLSA 200406-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Firefox 3.0.x < 3.0.2 Multiple Vulnerabilities
The installed version of Firefox 3.0 is earlier than 3.0.2. Such versions are potentially affected by the following security issues : - An attacker can cause the content window to move while the mouse is being clicked, causing an item to be dragged rather than clicked-on MFSA 2008-40. - Privilege...
Gentoo Security Advisory GLSA 200505-12 (postgresql)
The remote host is missing updates announced in advisory GLSA 200505-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200405-17 (metamail)
The remote host is missing updates announced in advisory GLSA 200405-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200408-20 (Qt)
The remote host is missing updates announced in advisory GLSA 200408-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200405-17 (metamail)
The remote host is missing updates announced in advisory GLSA 200405-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200410-30 (GPdf)
The remote host is missing updates announced in advisory GLSA 200410-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Firefox < 2.0.0.17 Multiple Vulnerabilities
The installed version of Firefox is affected by various security issues : - Using a specially crafted UTF-8 URL in a hyperlink, an attacker might be able to exploit a stack buffer overflow in the Mozilla URL parsing routes to execute arbitrary code MFSA 2008-37. - It is possible to bypass the...