CVE-2011-2826

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...

UBUNTU-CVE-2011-2826

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...

CVE-2011-2826

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...

CVE-2011-2826

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...

CVE-2011-2826

Removed by vendor...

PT-2011-4125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.215 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. Recommendations For versions prior to 13.0.782.215, update to version 13.0.782.21...

CVE-2011-2826: Undefined Security Weakness

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 13.0.782.215 and is potentially affected by several vulnerabilities: - An unspecified error related to command line URL parsing exists. Issue 72492 - Use-after-free errors related to line box handling, counter nodes, custom...

libpng: Invalid read when handling empty sCAL chunks

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

CVE-2011-2886

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via a .docx document with empty bullet styles for parent bullets...

CVE-2011-2753

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the empty trash implementation and 2 the Index Order aka optionsorder page, a different issue than...

UBUNTU-CVE-2011-2753

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the empty trash implementation and 2 the Index Order aka optionsorder page, a different issue than...

CVE-2011-2753: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the empty trash implementation and 2 the Index Order aka optionsorder page, a different issue than...

PT-2011-4063

Name of the Vulnerable Software and Affected Versions SquirrelMail versions 1.4.21 and earlier Description The issue involves multiple cross-site request forgery CSRF vulnerabilities that allow remote attackers to hijack the authentication of victims. This is achieved through vectors involving th...

CVE-2011-2640: Undefined Security Weakness

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

Nmap NSE net: ms-sql-hasdbaccess

Queries Microsoft SQL Server ms-sql for a list of databases a user has access to. The script needs an account with the sysadmin server role to work. It needs to be fed credentials through the script arguments or from the scripts 'mssql-brute' or 'mssql-empty- password'. When run, the script...

Nmap NSE net: mysql-empty-password

Checks for MySQL servers with an empty password for 'root' or 'anonymous'. OpenVAS Vulnerability Test $Id: gbnmapmysqlemptypasswordnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap...

Nmap NSE net: ms-sql-empty-password

Attempts to authenticate using an empty password for the sysadmin sa account. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: ms-sql-empty-password

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: mysql-empty-password

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...