WordPress Advanced Custom Fields plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress Advanced Custom Fields plugin before 5.8.12, which...

Apache Allura Cross-Site Scripting Vulnerability

Apache Allura is the United States Apache Apache Software Foundation's set of open source project hosting platform. The platform supports the management of source code repositories, bug reports, wiki pages and blogs. A cross-site scripting vulnerability exists in the user drop-down selector in...

Debian Security Advisory DSA 3731-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5181 A cross-site scripting issue was discovered. CVE-2016-5182 Giwan Go discovered a heap overflow issue. CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. CVE-2016-5184 Another...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 54.0.2840.59. It is, therefore, affected by multiple vulnerabilities as referenced in the 201610stable-channel-update-for-desktop advisory. - Unspecified vulnerabilities in Google Chrome before 54.0.2840.59. CVE-2016-5194...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

Binary data 9687.pasl...

MIUI-V5 pattern lock/shortcut key switch design flaw could lead to bypass-vulnerability warning-the black bar safety net

Brief description: Today the third to grab the Red rice, or did not grab, depressed and... It seems 9 months of the millet 3 is simply grab the rhythm of Ah, find F-Code, Xiaomi 3 or red rice can be. Don't know why, before submitting a no show.,,, a Detailed description: 1 require F Code. 2 is in...

CVE-2010-4555

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 drop-down selection lists, 2 the greater than character in the SquirrelSpell spellchecking plugin, and 3 errors associated wit...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Null pointer dereference

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Microsoft Windows win32k.sys DoS

WMCLOSE event for active drop-down menu causes system to crash...

MS Windows Media Player ASF Marker Buffer Overflow

I dunno if I've sent this before. If you embed a marker long enough in an .ASF video file you can make WMP crash when a victim clicks the marker drop down list under the file during playback. Use ASFCHOP.EXE to embed the following script to any ASF file: ----8----cut-here-----8---- startmarkertab...