RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:0678)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0678 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The pgdump utility inserted object names literally into...

Ubuntu 10.04 LTS / 11.04 / 11.10 : ubufox update (USN-1430-2)

USN-1430-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:066)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

SeaMonkey < 2.9.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.9.0. Such versions are potentially affected by the following security issues : - An error exists with the handling of JavaScript errors that can lead to information disclosure. CVE-2011-1187 - An off-by-one error exists in the 'OpenType...

Firefox < 12.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 12.0 and thus, is potentially affected by the following security issues : - An error exists with handling JavaScript errors that can lead to information disclosure. CVE-2011-1187 - An off-by-one error exists in the 'OpenType Sanitizer' which can le...

CVE-2012-0477

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...

CVE-2012-0477

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...

CVE-2012-0477

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...

Mozilla: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues (MFSA 2012-29)

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues — Mozilla

Security researcher Masato Kinugawa found that during the decoding of ISO-2022-KR and ISO-2022-CN character sets, characters near 1024 bytes are treated incorrectly, either doubling or deleting bytes. On certain pages it might be possible for an attacker to pad the output of the page such that...

CVE-2012-1484

Unspecified vulnerability in the WaliSMS CN cn.com.wali.walisms application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the WaliSMS CN cn.com.wali.walisms application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors...

CVE-2012-1484

Technical details are not publicly available in the provided documents. No affected products, vectors, or remediation are specified here. Monitor for updates from official sources.

CVE-2012-1403

Unspecified vulnerability in the Dolphin Browser CN com.dolphin.browser.cn application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors...

CVE-2012-1403

Unspecified vulnerability in the Dolphin Browser CN com.dolphin.browser.cn application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors...

Security feature bypass

Unspecified vulnerability in the Dolphin Browser CN com.dolphin.browser.cn application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors...

CVE-2012-1403

Technical details for CVE-2012-1403 are not publicly provided in the supplied documents; no affected products, vectors, impact, or remediation are specified. Monitor for updates.

CVE-2012-1403

Unspecified vulnerability in the Dolphin Browser CN com.dolphin.browser.cn application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors...