6020 matches found
CVE-2002-2047
The CVE-2002-2047 entry describes a vulnerability in the file preview feature of Sketch (version 0.6.12 and earlier). The issue is that remote attackers can execute arbitrary commands by supplying shell metacharacters in the filename of an encapsulated Postscript (EPS) file, exploiting the previe...
CVE-2002-2047: Undefined Security Weakness
The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...
CVE-2004-2098: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the banner engine TBE 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability...
CVE-2005-1191: Undefined Security Weakness
The Web View DLL webvw.dll, as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe "'" in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when t...
Microsoft Windows 98/2000 Explorer - Preview Pane Script Injection
source: https://www.securityfocus.com/bid/13248/info Microsoft Windows Explorer is prone to a script injection vulnerability. This occurs when the Windows Explorer preview pane Web View is enabled on Windows 2000 computers. Windows 98/98SE/ME are also affected by this issue. If a file with...
CVE-2004-1529: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the 1 type, 2 day, 3 month, or 4 year parameters in a Preview operation, or 5 event comments...
CVE-2004-1212
The CVE-2004-1212 entry describes a directory traversal vulnerability in Blog Torrent Preview 0.8, specifically in btdownload.php. An attacker can use a .. sequence in the file parameter to download arbitrary files from the affected server. The issue is exploitable remotely (no authentication req...
Multiple Microsoft Internet Explorer crossite scripting bugs
Same name function redirection crossite scripting, ADODB.Stream vulnerability variant Shell.Application, mouse click hijacking with Popup.show, Media Preview crossite scripting, drag-n-drop files to shell:Startup...
CVE-2004-0726: Undefined Security Weakness
The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel...
Microsoft Outlook Express fails to properly validate malformed e-mail headers
Overview A vulnerability exists in some versions of Microsoft Outlook Express that could allow a remote attacker to cause a denial of service. Description According to Microsoft Security Bulletin MS04-018, a flaw exists in the way that some versions of Microsoft's Outlook Express mail client...
Media Preview Script Execution Vulnerability
Note: This vulnerability as well as several more can be found at http://www.geryhats.cjb.net Media Preview Script Execution Vulnerability Tested MSDXM.DLL file version 6.4.09.1128 Microsoft Windows 2000 Discussion By using the windows media player control, media can be played in a browser,...
Windows XP EMF buffer overflow
Heap overflow on image preview...
CVE-2003-0295
Cross-site scripting XSS vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability...
Important: Red Hat Security Advisory: kdebase security update
This erratum provides updated KDE packages to resolve a vulnerability in the handling of PostScript and PDF files. KDE is a graphical desktop environment for the X Window System. KDE versions up to and including KDE 3.1.1 have a vulnerability caused by neglecting to use the -dSAFER option when...
CVE-2003-0295
Cross-site scripting XSS vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability...
CVE-2003-0295: Undefined Security Weakness
Cross-site scripting XSS vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability...
CVE-2002-0739: Undefined Security Weakness
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page...
CVE-2000-0334: Undefined Security Weakness
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...
2022-01 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5009625)
2022-01 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems KB5009625...