79 matches found
Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...
Horde IMP Information Disclosure Vulnerability
This host is running Horde IMP and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbhordeimpinfodiscvuln.nasl 5820 2017-03-31 11:20:49Z cfi $ Horde IMP Information Disclosure Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Mozilla Products Necko DNS Information Disclosure Vulnerability (Linux)
The host is installed with Thundebird/Seamonkey and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsneckodnsinfodiscvulnlin.nasl 7273 2017-09-26 11:17:25Z cfischer $ Mozilla Products Necko DNS Information Disclosure Vulnerability Linux Authors: Antu...
Mozilla Products Necko DNS Information Disclosure Vulnerability - Linux
Thunderbird/Seamonkey is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Products Necko DNS Information Disclosure Vulnerability (Windows)
The host is installed with Thundebird/Seamonkey and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsneckodnsinfodiscvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Necko DNS Information Disclosure Vulnerability Windows Authors: Antu...
Mozilla Products Information Disclosure Vulnerability - Windows
Firefox/Seamonkey is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0463
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...
Design/Logic Flaw
Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests. NOTE: the...
Cross site request forgery (csrf)
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...
Cross site request forgery (csrf)
Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...
CVE-2009-4629
Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APPTYPEMAIL or APPTYPEEDITOR, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests, as...
CVE-2010-0463
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...
CVE-2009-4630
Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests. NOTE: the...
CVE-2009-4629
Mozilla Necko DNS Information Disclosure (CVE-2009-4629) affects Thunderbird 3.0.1, SeaMonkey, and related apps. The issue is DNS prefetching triggered even for APP_TYPE_MAIL/APP_TYPE_EDITOR, enabling an attacker to infer a user’s network location by logging DNS requests (e.g., when reading text/...
CVE-2009-4630
Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests. NOTE: the...
CVE-2009-4629
Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APPTYPEMAIL or APPTYPEEDITOR, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests, as...
CVE-2010-0464
CVE-2010-0464 affects Roundcube 0.3.1 and earlier, where the browser is not instructed to avoid DNS prefetching for domain names in email messages, enabling remote attackers to infer the user’s network location by DNS requests. Public references include Fedora backport and Debian backports adviso...
CVE-2009-4630
Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests. NOTE: the...
phpsurveyor Multiple Vulnerabilities
------------------------------------------------------------------ - phpsurveyor Multiple Vulnerabilities - -= http://colander.altervista.org/advisory/phpsurveyor.txt =- ------------------------------------------------------------------ -= phpsurveyor =- Omnipresent April 18, 2006 Vunerabilitys:...