16 matches found
Updated emacs packages fix security vulnerability
Memory corruption vulnerability when processing svg css. CVE-2026-6861...
EUVD-2026-36635
The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 3.3.19. This is due to the combinecurrentcss function trusting values harvested from page HTML and converting same-site URLs to absolute filesystem...
Exploit for Use After Free in Google Chrome
CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free...
The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Roundcube email client relates to the lack of measures taken to protect the website structure during the processing of CSS style sheets. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted email...
The vulnerability of the Thunderbird email client and the Firefox ESR browser lies in a error during the processing of CSS style sheets accessible through internal URIs, such as “resource:”. This allows attackers to circumvent the implemented content security policies.
The vulnerability of the Thunderbird email client and the Firefox ESR browser is related to an error in processing CSS style sheets that are accessed through internal URIs, as “resource:”. Exploiting this vulnerability can allow a malicious actor to bypass implemented content security policies...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to insufficient protection of sensitive data, allows attackers to gain access to protected information or cause other adverse effects.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient protection of service data during the processing of CSS. Exploiting this vulnerability can allow a remote attacker to gain access to protected information or perform other malicious...
PT-2021-7305 · Roundcube +3 · Roundcube +3
Name of the Vulnerable Software and Affected Versions: Roundcube versions 1.4.13 and earlier, 1.5.x before 1.5.2 Description: The issue allows for cross-site scripting XSS attacks via crafted Cascading Style Sheets CSS token sequences in HTML e-mail messages. This can enable a remote attacker to...
CVE-2010-5074
The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...
Google Chrome multiple vulnerabilities - March 11 (Linux)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmar11lin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome multiple vulnerabilities - March 11 Linux Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...
Google Chrome < 10.0.648.204 Multiple Vulnerabilities (Mar 2011) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome < 10.0.648.204 Multiple Vulnerabilities (Mar 2011) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome < 10.0.648.204 Multiple Vulnerabilities
Binary data 5845.pasl...
Google Chrome < 10.0.648.204 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 10.0.648.204. Such versions of Chrome are affected by multiple vulnerabilities: - A buffer error exists in string handling functions. Issue 72517 - A use-after-free error exists in the processes for loading frames. Issue...
CVE-2011-1109
Removed by vendor...
CVE-2010-3819
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets CSS boxes, which allows remote attackers to execute arbitrary code or cause a...
Apple iPhone memory corruption
Integer overflow on CSS processing leads to memory corruption...