7 matches found
UBUNTU-CVE-2023-6869
A dialog element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox 121...
CVE-2017-5634
The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...
openSUSE Security Update : Opera (openSUSE-SU-2013:0372-1)
Opera was updated to 12.02 Fixed an issue where truncated dialogs may be used to trick users - full changelog available at: http://www.opera.com/docs/changelogs/unix/1202/ - fixes bnc778087 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Opera < 12.01 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues : - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. 1016 - Errors exist in the handling of DOM elements...
Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation
source: https://www.securityfocus.com/bid/17713/info Internet Explorer is prone to a remote code-execution vulnerability through exploiting a race-condition when displaying modal security dialog boxes. This issue may be exploited to cause users to inadvertently allow remote-code to be executed...
Multiple Microsoft Internet Explorer vulnerabilities
Code execution, memory corruption, download dialog manipulation, unencrypted HTTPS proxy data leak...
Microsoft Internet Explorer Dialog Manipulation Vulnerability
Description Internet Explorer is prone to a remote code-execution vulnerability through manipulation of custom dialog boxes. Keystrokes entered while one of these dialogs is displayed may be buffered and passed to a download dialog, allowing attacker-supplied code to be executed. Technologies...