Buffer overflow

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

CVE-2006-0005: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

Code injection

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

CVE-2006-0544

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

CVE-2006-0544

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

CVE-2006-0365

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

Cross site scripting

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

CVE-2006-0364

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

CVE-2006-0365

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

CVE-2006-0365

CVE-2006-0365 concerns a Cross-site Scripting (XSS) vulnerability in XMB (extreme message board). The issue enables remote attackers to inject arbitrary web script or HTML by supplying JavaScript in the SRC attribute of an IMG element. Documents do not provide specific vulnerable versions, exploi...

CVE-2006-0365: Undefined Security Weakness

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

CVE-2006-0364: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

Microsoft Internet Explorer 5.0.1 - Malformed .IMG .XML Parsing Denial of Service

Microsoft Internet Explorer 5.0.1 - Malformed .IMG .XML Parsing Denial of Service source: https://www.securityfocus.com/bid/16240/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue presents itself when the browser handles a specially crafted IMG element ...

Microsoft Internet Explorer 5.0.1 - Malformed .IMG / .XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/16240/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue presents itself when the browser handles a specially crafted IMG element in a malformed XML block. An attacker may exploit this issue by enticing a user to...

Cross site scripting

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

CVE-2006-0198

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

CVE-2006-0198

CVE-2006-0198 describes a Cross-site scripting (XSS) vulnerability in a XOOPS module (possibly poll or Pool) where remote attackers can inject arbitrary web script or HTML via the SRC attribute of an IMG element in a comment. The issue is documented with a MEDIUM base score (4.3) and partial inte...

CVE-2006-0198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...