13279 matches found
CVE-2011-3656
CVE-2011-3656 affects Mozilla Firefox up to version 3.6.24 and 4.x through 7, with a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via HTTP 0.9 error handling, non-default ports, and content-sniffing. The provided documents consistently describe t...
CVE-2011-3656
Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing...
PT-2021-8350
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.24 Mozilla Firefox versions 4.x through 7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via specific vectors, including those involving HTTP 0....
CVE-2011-3656: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing...
The vulnerability of the Exim message transfer agent, related to resource management errors, allows a attacker to perform denial-of-service attacks.
The vulnerability of the Exim message transfer agent is related to resource management errors. Exploiting this vulnerability allows a malicious actor to perform a Denial-of-Service attack by sending specially crafted data to the application...
The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.
The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of the Cache Manager API of the Squid proxy server allows a hacker to induce a service failure.
The vulnerability of the Squid proxy server’s Cache Manager API component is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.
The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...
UVI-2021-1000101 ext4: always panic when errors=panic is specified
ext4: always panic when errors=panic is specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...
GSD-2021-1000101 ext4: always panic when errors=panic is specified
ext4: always panic when errors=panic is specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...
PT-2021-28527
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...
PT-2021-24574
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...
PT-2021-28568
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system, where the system always panics when the errors=panic option is specified. The actual impact and attack plausibility have not yet been proven...
PT-2021-24533
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and i...
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service. Resource management errors via fftools/cmdutils.c results in a denial of service condition...
PT-2021-7045 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...
The vulnerability of the GNTTABOP_map_grant component in Xen hypervisors allows a perpetrator to trigger a service failure.
The vulnerability of the GNTTABOPmapgrant component in Xen hypervisors is related to errors in returned values. Exploiting this vulnerability can allow an attacker to cause a service failure...