CVE-2007-2255

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 engdir parameter to addmember.php, 2 langpath parameter to admin/enginelib/class.phpmailer.php, and the 3 spawroot parameter to...

Format string

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...

CVE-2007-1463

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...

CVE-2007-1463

Inkscape before 0.45.1 contains a format string vulnerability in URIs parsed by certain dialogs, allowing user-assisted remote code execution. Public references in OpenVAS/Nessus advisories map this to CVE-2007-1463; affected OS advisories (MDKSA-2007:069, USN-438-1, Gentoo GLSA 200704-10, openSU...

CVE-2007-1463: Undefined Security Weakness

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...

scip-2962.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities scip AG Vulnerability ID 2962 02/27/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2962 I. INTRODUCTION "WordPress is a state-of-the-art semantic personal publishing platform with a focu...

Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities scip AG Vulnerability ID 2962 02/27/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2962 I. INTRODUCTION "WordPress is a state-of-the-art semantic personal publishing platform with a focu...

opera -- RSA Signature Forgery

Opera reports: A specially crafted digital certificate can bypass Opera's certificate signature verification. Forged certificates can contain any false information the forger chooses, and Opera will still present it as valid. Opera will not present any warning dialogs in this case, and the securi...

CVE-2006-4283: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spawdir parameter in dialogs/ scripts including 1 a.php, 2 collorpicker.php, 3 img.php, 4 imglibrary.php, 5 table.php, or 6 td.php...

CentOS 3 : mozilla (CESA-2005:384)

Updated Mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bu...

CVE-2006-2928: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter in 1 dialogs/img.php and 2 dialogs/td.php...

[Full-disclosure] Internet Explorer User Interface Races, Redeux

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Microsoft Internet Explorer User Interface Race Condition I. SYNOPSIS Affected Systems: Windows 98 Windows 98 Second Edition Windows Millennium Edition Windows 2000 Windows XP Windows Server 2003 Risk: Medium Impact: Remote code execution some...

Microsoft Internet Explorer modial dialogs spoofing

It's possible to spoof modal dialog content. This problem is only significant for Windows proir to Windows XP SP2 / Windows 2003 SP1...

CVE-2005-3560

Zone Labs 1 ZoneAlarm Pro 6.0, 2 ZoneAlarm Internet Security Suite 6.0, 3 ZoneAlarm Anti-Virus 6.0, 4 ZoneAlarm Anti-Spyware 6.0 through 6.1, and 5 ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs"...

CVE-2005-3560

Zone Labs 1 ZoneAlarm Pro 6.0, 2 ZoneAlarm Internet Security Suite 6.0, 3 ZoneAlarm Anti-Virus 6.0, 4 ZoneAlarm Anti-Spyware 6.0 through 6.1, and 5 ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs"...

CVE-2005-3560: Undefined Security Weakness

Zone Labs 1 ZoneAlarm Pro 6.0, 2 ZoneAlarm Internet Security Suite 6.0, 3 ZoneAlarm Anti-Virus 6.0, 4 ZoneAlarm Anti-Spyware 6.0 through 6.1, and 5 ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs"...

security flaw

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...

galeon, mozilla security update

CentOS Errata and Security Advisory CESA-2005:384-01 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-April/073786.html Affected packages: galeon mozilla mozilla-chat mozilla-devel mozilla-dom-inspector mozilla-js-debugger mozilla-mail mozilla-nspr...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:384 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-April/073779.html https://lists.centos.org/pipermail/centos-announce/2005-April/073780.html...

RHEL 2.1 / 3 : Mozilla (RHSA-2005:384)

Updated Mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bu...