CVE-2008-5734

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS

Binary data 4800.prm...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...

CVE-2008-5401

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...

CVE-2008-5402

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...

Double free

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...

Stack overflow

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...

CVE-2008-5402

Trillian has a CVE-2008-5402 vulnerability: a double-free in the XML parser before version 3.1.12.0 can enable remote code execution via crafted XML (notably the IMG SRC ID payload). Public sources (ZDI-08-078, OpenVAS entries, and NVD record) corroborate a remote memory corruption/ARiC condition...

CVE-2008-5401

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...

CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash

CUPS 1.3.7 - Cross-Site Request Forgery Add RSS Subscription Remote Crash // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i"; / TESTED ON: Ubuntu 8.04.1 fully patched as of 19th Oct 2008 Linux...

CVE-2008-4871

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

Cross site scripting

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

CVE-2008-4871

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

CVE-2008-4871

CVE-2008-4871 is an XSS vulnerability affecting My Little Forum 1.75 and 2.0 Beta 23, exploitable via BBCode IMG tags to inject arbitrary script/HTML. Affected component is the forum software’s input parsing for BBCode IMG usage; underlying root cause details are not provided in the connected doc...

Cross site scripting

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

CVE-2008-4571

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

CVE-2008-4571

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

xen security and bug fix update

3.0.3-64.el52.3 - Fix overflow in qemu-img rhbz 454651 3.0.3-64.el52.2 - Correctly limit PVFB size CVE-2008-1952 rhbz 447760 - Disable QEMU USB disk image format auto-detection CVE-2008-1945 rhbz 445845...

New Automatic File Download vulnerabilities in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новых Automatic File Download уязвимостях в браузере Google Chrome. В браузере Chrome имеются уязвимости, которая позволяют загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Данные две Automatic File...

FreeBSD Ports: w3m, w3m-img, w3m-m17n, w3m-m17n-img, ja-w3m, ja-w3m-img

The remote host is missing an update to the system as announced in the referenced advisory. VID 9347d82d-9a66-11db-b271-000e35248ad7 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...