Mozilla Firefox and Thunderbird sensor.dll Insecure Library Loading (CVE-2011-2980)

A remote code execution vulnerability has been reported in Mozilla Firefox and Thunderbird. The vulnerability is due to insecure library loading while opening specially crafted HTML files. A remote attacker may trigger this vulnerability by enticing a target user to open a malicious HTML file fro...

RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the fact...

Amaya Browser BDO Tag Buffer Overflow (CVE-2009-0323)

A buffer overflow vulnerability has been reported in Amaya web browser. Amaya is an open source web authoring and browsing tool which is mainly used as a test bed for web standards. The vulnerability is due to an error in the way the browser parses HTML files with specially crafted BDO tags. A...

Anonymous, LulzSec Dump 10 Gigs of Sensitive Law Enforcement Data

Hacker collectives, LulzSec and Anonymous claim to have compromised the servers of the Missouri Sheriff’s Association, posting some 10GB of sensitive data online. According to a statement posted online, the leaked information includes more than 300 email accounts from some 56 law enforcement...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

Apple Safari Multiple Vulnerabilities - Nov09

This host has Apple Safari installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvulnnov09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple Safari Multiple Vulnerabilities - Nov09 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Open redirect

Apple Safari before 4.0.4 does not properly implement certain 1 Open Image and 2 Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site...

CVE-2009-2842

Apple Safari before 4.0.4 does not properly implement certain 1 Open Image and 2 Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site...

Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

Fedora Update for libxml2 FEDORA-2008-7395

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-7395 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libxml2 FEDORA-2008-8575

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-8575 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-5546

VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

Mozilla Foundation Security Advisory 2008-44

Mozilla Foundation Security Advisory 2008-44 Title: resource: traversal vulnerabilities Impact: Moderate Announced: September 23, 2008 Reporter: Boris Zbarsky, Georgi Guninski Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbird 2.0.0.17 SeaMonkey 1.1.12...

CVE-2008-4068

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this...

Directory traversal

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this...

CVE-2008-0758

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...