760 matches found
CVE-2012-2860
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...
CVE-2012-2860
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...
Code injection
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...
CVE-2012-2860
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...
CVE-2012-2860
Removed by vendor...
CVE-2012-2860
CVE-2012-2860 affects Google Chromium/Chrome’s date-picker: out-of-bounds access when clicking the date picker can lead to a denial of service or potentially other impact. Affected versions: Chrome before 21.0.1180.57 on macOS/Linux and before 21.0.1180.60 on Windows/Chrome Frame. Remediation: up...
Google Chrome < 21.0.1180.60 Multiple Vulnerabilities
Binary data 800901.prm...
Google Chrome < 21.0.1180.60 Multiple Vulnerabilities
Binary data 6528.pasl...
Google Chrome < 21.0.1180.60 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 21.0.1180.60 and is, therefore, affected by the following vulnerabilities : - Re-prompts are not displayed for excessive downloads. CVE-2012-2847 - Drag and drop file access restrictions are not restrictive enough...
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special...
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r Team Shoutzz:- To all ICW members...
CVE-2010-1164
Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 element or 2 defaultColor parameter to the Colour Picker page; the 3 formName parameter, 4 element parameter, or 5 full name field to the Us...
VulnCheck KEV: CVE-2010-1164
Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 element or 2 defaultColor parameter to the Colour Picker page; the 3 formName parameter, 4 element parameter, or 5 full name...
Group picker popup JSP has XSS hole if group names are XSS shaped
If a group name has a XSS shaped name, then the group picker will allow scripts to be executed...
Group picker popup JSP has XSS hole if group names are XSS shaped
If a group name has a XSS shaped name, then the group picker will allow scripts to be executed...
Cross site scripting
Cross-site scripting XSS vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag...
CVE-2009-4152
Cross-site scripting XSS vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag...
CVE-2009-4152
Cross-site scripting XSS vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag...
CVE-2008-1179
Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...