1567 matches found
DEBIAN-CVE-2007-2026
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...
Cross site scripting
Cross-site scripting XSS vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler...
CVE-2007-1678
Cross-site scripting XSS vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler...
CVE-2007-1678
Cross-site scripting XSS vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler...
CVE-2007-1678
The CVE-2007-1678 entry concerns a Cross-site Scripting (XSS) vulnerability in the Firefox extension Fizzle 0.5. The issue arises when processing RSS feeds, whose content can be injected and is executed by the chrome: URI handler. The vulnerability affects the Fizzle 0.5 extension and enables rem...
CVE-2007-1678: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler...
Cross site scripting
Cross-site scripting XSS vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0791
Cross-site scripting XSS vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0791
CVE-2007-0791 is a cross-site scripting (XSS) vulnerability in Bugzilla’s Atom feeds affecting Bugzilla versions 2.20.3, 2.22.1, 2.23.3, and older releases back to 2.20.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors within Atom feeds. The conne...
CVE-2007-0791
Cross-site scripting XSS vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0791: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-6919
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing "", which Sage modifies to close the img element before the malicious script...
GLSA-200610-09 : libmusicbrainz: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200610-09 libmusicbrainz: Multiple buffer overflows Luigi Auriemma reported a possible buffer overflow in the MBHttp::Download function of lib/http.cpp as well as several possible buffer overflows in lib/rdfparse.c. Impact : A...
Debian DSA-944-1 : mantis - several vulnerabilities
Several security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4238 Missing input sanitising allows remote attackers to inject arbitrary web script or HTML. -...
CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer
Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0322 Bugtraq ID: None currently assigned CVE Name: None currently assign...
CVE-2006-0389
Cross-site scripting XSS vulnerability in Syndication Safari RSS in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds...
CVE-2006-0389
Cross-site scripting XSS vulnerability in Syndication Safari RSS in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds...
CVE-2006-0389
CVE-2006-0389 describes a cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) on Mac OS X 10.4 through 10.4.5. The flaw allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds, in the context of the affected user’s browser. Affected pro...
CVE-2006-0389: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Syndication Safari RSS in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds...