Lucene search
+L

5920 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/24 12:00 a.m.•8 views

CVE-2008-3836: Undefined Security Weakness

feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the 1 elem.doCommand, 2 elem.dispatchEvent, 3 setTitleText, 4 setTitleImage, and 5 initSubscriptionUI functions...

7.5CVSS6.3AI score0.02531EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2008/09/24 12:00 a.m.•31 views

CVE-2008-3836

feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the 1 elem.doCommand, 2 elem.dispatchEvent, 3 setTitleText, 4 setTitleImage, and 5 initSubscriptionUI functions...

7.5CVSS5.9AI score0.02531EPSS
SaveExploits1References3
NVD
NVD
•added 2008/08/13 12:42 p.m.•35 views

CVE-2008-2259

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

9.3CVSS7.5AI score0.3008EPSS
SaveExploits5References8
Prion
Prion
•added 2008/08/13 12:42 p.m.•38 views

Design/Logic Flaw

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

9.3CVSS8AI score0.3008EPSS
SaveExploits5References8Affected Software1
Cvelist
Cvelist
•added 2008/08/13 10:00 a.m.•40 views

CVE-2008-2259

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

7.4AI score0.3008EPSS
SaveExploits5References8
CVE
CVE
•added 2008/08/13 10:00 a.m.•78 views

CVE-2008-2259

The CVE-2008-2259 entry refers to a set of memory corruption/argument-validation issues in Microsoft Internet Explorer 6 and 7 during print preview, described as the HTML Component Handling Vulnerability. Affected products are IE 6.x and IE 7.x on Windows; the underlying cause is improper validat...

9.3CVSS7.3AI score0.3008EPSS
SaveExploits5References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/08/13 12:00 a.m.•8 views

CVE-2008-2259: Improper Input Validation

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

9.3CVSS6.5AI score0.3008EPSS
SaveExploits5References2
Saint
Saint
•added 2008/08/13 12:00 a.m.•69 views

Internet Explorer print preview argument validation vulnerability

Added: 08/13/2008 CVE: CVE-2008-2259 BID: 30612 OSVDB: 47414 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A flaw in the handling of validation of arguments by the print preview function in Internet Explorer allows command...

9.3CVSS6.2AI score0.3008EPSS
SaveExploits5
Saint
Saint
•added 2008/08/13 12:00 a.m.•76 views

Internet Explorer print preview argument validation vulnerability

Added: 08/13/2008 CVE: CVE-2008-2259 BID: 30612 OSVDB: 47414 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A flaw in the handling of validation of arguments by the print preview function in Internet Explorer allows command...

9.3CVSS6.2AI score0.3008EPSS
SaveExploits5
Saint
Saint
•added 2008/08/13 12:00 a.m.•63 views

Internet Explorer print preview argument validation vulnerability

Added: 08/13/2008 CVE: CVE-2008-2259 BID: 30612 OSVDB: 47414 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A flaw in the handling of validation of arguments by the print preview function in Internet Explorer allows command...

9.3CVSS6.2AI score0.3008EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2008/07/30 12:00 a.m.•23 views

Internet Explorer Print Preview Handling Command Execution (MS08-045; CVE-2008-2259)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability was reported in the way Microsoft Internet Explorer handles argument validation in print preview handling. By convincing a user to visit a specially crafted HTML documents or open a malicio...

9.3CVSS6.9AI score0.3008EPSS
SaveExploits5
Prion
Prion
•added 2008/07/18 4:41 p.m.•28 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

4.3CVSS5.8AI score0.02467EPSS
SaveExploits0References9Affected Software2
NVD
NVD
•added 2008/07/18 4:41 p.m.•44 views

CVE-2008-3218

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

4.3CVSS5.7AI score0.02467EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2008/07/18 4:41 p.m.•36 views

CVE-2008-3218

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

4.3CVSS6AI score0.02467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2008/07/18 4:00 p.m.•56 views

CVE-2008-3218

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

5.5AI score0.02467EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/18 12:00 a.m.•6 views

CVE-2008-3218: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

4.3CVSS6AI score0.02467EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2008/06/03 12:00 a.m.•32 views

battleblog-sql.txt

++ | hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN | | hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN | | hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN | | hhh hhh aa aa cc kk k E RR R TT NN NNN | | hhh hhh aa aa ccccccc kk k EEEEEEE RR R TT NN NN | | | ++ + Script Nam...

7.4AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:00 p.m.•19 views

Eudora Japanese version stops working after the application crashes

Overview Eudora is a mail client from QUALCOMM. The Eudora Japanese version sold by Livedoor contains a vulnerability to crash, caused by previewing an email that has a corrupt image attachment. Impact Eudora Japanese version stops functioning, once crashed by opening an email message containing ...

5CVSS6.8AI score
SaveExploits0References2
securityvulns
securityvulns
•added 2008/04/27 12:00 a.m.•81 views

GroupWise 7 attached bugs

Product: GroupWise 7 OS: Windows xp Find two types of vulnerabilities in this client is a correo.Una xss and the other a denial of service but I am also appears to be run arbitrary code. XSS in web access You can run Javascript code to send an attachment with poorly trained jpg extension. Denial ...

1.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2008/03/18 11:00 p.m.•42 views

CVE-2008-0994

Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods...

8.6AI score0.01226EPSS
SaveExploits1References9
Rows per page
Query Builder