6221 matches found
CVE-2010-0044
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...
UBUNTU-CVE-2010-0044
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...
CVE-2010-0044
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...
CVE-2010-0044: Undefined Security Weakness
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...
Scripts Feed Dating Software SQL Injection
============================================================================== Scripts Feed Dating Software Cookie Manip/SQLi Multiple Remote Vulnerabilities ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27...
Scripts Feed Business Directory SQL Injection
============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...
Scripts Feed Dating Software (Cookie Manip/SQLi) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================= Scripts Feed Dating Software Cookie Manip/SQLi Multiple Vulnerabilities =========================================================================...
Scripts Feed Business Directory - SQL Injection
Scripts Feed Business Directory - SQL Injection ============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com ...
Scripts Feed Business Directory SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Scripts Feed Business Directory SQL Injection Vulnerability ===========================================================...
Scripts Feed Business Directory - SQL Injection
============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...
Debian Security Advisory DSA 1951-1 (firefox-sage)
The remote host is missing an update to firefox-sage announced via advisory DSA 1951-1. OpenVAS Vulnerability Test $Id: deb19511.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1951-1 firefox-sage Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
DSA-1951-1 firefox-sage - insufficient input sanitizing
Bulletin has no description...
Firefox infoRSS扩展RSS源跨域脚本执行漏洞
BUGTRAQ ID: 37091 CVECAN ID: CVE-2009-4101 infoRSS是一款可以在状态栏显示RSS源的Firefox扩展。 infoRSS扩展没有正确地过滤RSS源中的description标签输入便用于渲染内容,用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla infoRSS 1.1.4.2 厂商补丁: Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Cross site scripting
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119
The CVE-2009-4119 issue affects Drupal’s Feed Element Mapper module: versions 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 are vulnerable to cross-site scripting, allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. Root cause deta...