5719 matches found
CVE-2002-2435
Technical details for CVE-2002-2435 are not provided in the connected documents. Monitor for updates.
CVE-2010-5069
The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...
CVE-2010-5068
Opera 10.5 is reported to mishandle the :visited CSS pseudo-class, enabling potential information disclosure of visited pages. The CVE-2010-5068 entry documents this issue with MEDIUM severity (CVSS v2 base score 4.3). OpenVAS/OpenVAS-derived entries also reference multiple information-disclosure...
CVE-2010-5069
Summary of CVE-2010-5069 (Chrome): The CSS implementation in Google Chrome (noted for version 4) fails to properly handle the :visited pseudo-class, enabling remote attackers to infer visited web pages through a crafted HTML document. The vulnerability is described as an information disclosure, w...
CVE-2010-5068
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2002-2436
CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...
CVE-2010-5069
Removed by vendor...
Mozilla Firefox CSS ":visited"信息泄露漏洞
BUGTRAQ ID: 50909 Firefox是一款非常流行的开源WEB浏览器。 Firefox在实现上存在信息泄露漏洞,攻击者可利用此漏洞访问敏感信息。 Mozilla Firefox 4.x Mozilla Firefox 3.x 厂商补丁: Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.mozilla.org/security/ http://www.securityfocus.com/data/vulnerabilities/exploits/50909.zip...
Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net
by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...
Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net
From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...
DEBIAN-CVE-2011-3646
phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...
CVE-2011-3885
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets CSS token-sequence data...
Design/Logic Flaw
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets CSS token-sequence data...
CVE-2011-3885
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets CSS token-sequence data...
CVE-2011-3885
The CVE-2011-3885 entry concerns a use-after-free in Google Chrome prior to 15.0.874.102, exploitable to cause a denial of service and potentially other unspecified impact via vectors related to stale CSS token-sequence data. Affected product: Google Chrome (pre-15.0.874.102). Root cause: use-aft...
CVE-2011-3885
Removed by vendor...
GateOne Beta - Terminal emulator for HTML5 web browsers
GateOne Beta - Terminal emulator for HTML5 web browsers The software makes use of WebSockets to connect a server backend written in Python and a frontend written for modern browsers in JavaScript, HTML5 and CSS. The frontend doesn't require any browser plug-ins to be installed.Gate One also...
Stack overflow
Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file...
CVE-2011-0334
CVE-2011-0334 describes a stack-based buffer overflow in gwia.exe, part of Novell GroupWise Internet Agent (GWIA) . The vulnerability occurs when GWIA handles long HTTP requests for certain .css resources, allowing remote attackers to execute arbitrary code. Affected software is GroupWise 8.0 pri...
CVE-2011-0334
Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file...