Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:51 a.m.6 views

CVE-2011-2382

Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrat...

4.3CVSS6.7AI score0.33881EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.2 views

SUSE CVE-2007-0800

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

4.3CVSS8.6AI score0.04655EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2007/03/14 12:24 a.m.2 views

security flaw

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

4.3CVSS7.2AI score0.04655EPSS
Exploits1References4
Prion
Prion
added 2007/02/07 11:28 a.m.27 views

Cross site scripting

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

4.3CVSS6.3AI score0.04655EPSS
Exploits1References50Affected Software1
NVD
NVD
added 2007/02/07 11:28 a.m.19 views

CVE-2007-0800

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

4.3CVSS6.3AI score0.04655EPSS
Exploits1References50
CVE
CVE
added 2007/02/07 11:0 a.m.106 views

CVE-2007-0800

CVE-2007-0800 is a cross-zone vulnerability in Mozilla Firefox 1.5.0.9 where blocked popups are treated as having an internal zone origin, enabling a user-assisted remote attacker to read arbitrary file:// URIs. The connected documents indicate Firefox was updated to version 1.5.0.10 to fix these...

4.3CVSS6.1AI score0.04655EPSS
Exploits1References50Affected Software1
securityvulns
securityvulns
added 2003/11/26 12:0 a.m.17 views

BackToFramedJpu - a successor of BackToJpu attack

BackToFramedJpu - a successor of BackToJpu attack tested OS:Win2k3,CN version IE: with MS03-048 installed. OS:WinXp, CN version Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16 overview A cross-zone scripting vulnerability has been found in Internet Explorer. If a webpage contains som...

0.2AI score
Exploits0
Rows per page
Query Builder