Arbitrary File Inclusion

kibana is vulnerable to arbitrary file inclusion attacks. The vulnerability exists through the Kibana Console API where a request can be sent to include external JS files which could possibly result in executing arbitrary commands...

UBUNTU-CVE-2011-0169

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...