368 matches found
CVE-2011-1337
Opera before 11.50 allows remote attackers to cause a denial of service disk consumption via invalid URLs that trigger creation of error pages...
Opera < 11.50 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...
Issue with error pages can cause a system crash
When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...
Opera < 11.50 Multiple Vulnerabilities
Binary data 5971.prm...
Issue with error pages can cause a system crash – Opera Security Advisories
When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...
SuSE 11.1 Security Update : kdelibs4 (SAT Patch Number 4407)
This update fixes a cross-site scripting XSS vulnerability in the way KHTML handles error pages. CVE-2011-1168 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...
JBoss Seam privilege escalation caused by EL interpolation in FacesMessages
jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...
KDE KHTML crossite scripting
Crossite scripting via error pages...
Chrome's Fail Folder
There’s something very retro about the “fail folder,” Google’s go-to image, which pops up on the Chrome Web browser every time you, say, lose your Internet connection. It’s colorless and two dimensional and its size and shape not so subtly recall the beloved GUI of early vintage Macs. Google made...
CPanel (error pages) Remote File Disclosure Vulnerability
Exploit for php platform in category web applications ========================================================= CPanel error pages Remote File Disclosure Vulnerability ========================================================= == Title: CPanel error pages Remote File Disclosure Vuln Author:...
Microsoft IIS HTTP错误页面导致跨站脚本执行漏洞
No description provided by source...
CVE-2009-4157
Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...
CVE-2009-4157
Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...
TwonkyMedia Web Server crossite scripting
Crossite scripting on error pages...
Cross site scripting
Cross-site scripting XSS vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages...
CVE-2009-0860
Cross-site scripting XSS vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages...
CGIWrap Charset Specification Weakness Error Message XSS
The remote host is running CGIWrap, a wrapper for CGI scripts to provide enhanced security. The version of CGIWrap installed on the remote host does not specify a charset when responses are for error pages. An attacker may be able to leverage this issue to inject arbitrary HTML and script code in...
ZYWALL Referer Header XSS Vulnerability
Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...