CVE-2011-3980: Undefined Security Weakness

Unspecified vulnerability in the Drag Drop Mass Upload ameosdragndropupload extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors...

CVE-2011-2782

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2011-2782

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

PT-2011-4085

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue concerns the drag-and-drop implementation, which does not properly enforce permissions for files. This allows remote attackers to bypass intended access restrictions via...

CVE-2011-2782: Incorrect Default Permissions

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2011-2782

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2011-2782

Google Chrome on Linux (pre-13.0.782.107) is affected by CVE-2011-2782 due to a drag-and-drop file permission handling flaw that could allow a user‑assisted remote attacker to bypass access restrictions via unspecified vectors. The issue is addressed in Chrome 13.0.782.107 (Stable Channel update)...

CVE-2011-2782

Removed by vendor...

CVE-2011-1258

Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different 1 domain or 2 zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."...

Information disclosure

Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different 1 domain or 2 zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."...

CVE-2011-1258

Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different 1 domain or 2 zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."...

CVE-2011-1258

CVE-2011-1258 affects Microsoft Internet Explorer 6–8. The vulnerability arises from improper restriction of web scripting, enabling a user‑assisted attacker to disclose sensitive information from a different domain/zone via drag‑and‑drop. Impact is partial confidentiality loss. Remediation: appl...

PT-2011-3617

Name of the Vulnerable Software and Affected Versions Adobe Shockwave NPAPI Plug-in affected versions not specified Description The issue is related to a remote code execution vulnerability in the Adobe Shockwave NPAPI Plug-in, specifically involving drag and drop functionality. Recommendations A...

PT-2011-2996

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8 Description An information disclosure issue exists, allowing script to access information from a different domain or zone. This can be exploited by an attacker constructing a specially crafted w...

Microsoft Internet Explorer拖放未初始化内存远程代码执行漏洞

Bugtraq ID: 48204 CVE ID：CVE-2011-1254 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理某些内容上的拖放事件时存在释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6....

CVE-2011-1258: Exposure of Resource to Wrong Sphere

Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different 1 domain or 2 zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."...

CVE-2011-1254: Use of Uninitialized Resource

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "Drag and Drop Memory Corruption Vulnerability."...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

The host is installed with Internet Explorer and is prone to cookie hijacking vulnerability. This NVT has been replaced by NVT secpodms11-057.nasl OID:1.3.6.1.4.1.25623.1.0.902613. OpenVAS Vulnerability Test $Id: gbmsie9cookiehijackingvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

The host is installed with Internet Explorer and is prone to cookie hijacking vulnerability. OpenVAS Vulnerability Test $Id: gbmsiecookiehijackingvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Cookie Hijacking Vulnerability Authors: Sooraj KS Copyright: Copyright c 201...