535 matches found
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
CVE-2013-1688
CVE-2013-1688 affects Mozilla Firefox’s Profiler UI rendering where untrusted data is parsed, enabling user‑assisted remote attackers to execute arbitrary JavaScript via a crafted site. The issue is fixed by updating to Firefox 22.0+ (as reflected in MFSA 2013-52 and downstream advisories). OpenS...
Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)
The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...
Arbitrary code execution within Profiler — Mozilla
Security researcher Mariusz Mlynski reported that when a user examines the profiler output on a malicious website containing specially crafted code, it is possible for arbitrary code execution to occur. This occurs because the profiler user interface runs in a special iframe that parses data from...
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
Fedora Update for kdesdk FEDORA-2013-10182
Check for the Version of kdesdk OpenVAS Vulnerability Test Fedora Update for kdesdk FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CVE-2012-6026
The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service device reload via crafted HTTP requests, aka Bug ID CSCuc62460...
Design/Logic Flaw
The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service device reload via crafted HTTP requests, aka Bug ID CSCuc62460...
CVE-2012-6026
The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service device reload via crafted HTTP requests, aka Bug ID CSCuc62460...
CVE-2012-6026
The CVE-2012-6026 entry concerns the HTTP Profiler on Cisco Aironet Access Points running software version 15.2 and earlier. The root cause is improper buffer management in the HTTP Profiler, allowing remote attackers to cause a denial of service (device reload) via crafted HTTP requests (Bug ID ...
CVE-2012-2171
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a stateviewmodulelog action ...
DEBIAN-CVE-2011-5027
Cross-site scripting XSS vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler...
CVE-2011-5027
Cross-site scripting XSS vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler...
Cross site scripting
Cross-site scripting XSS vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler...
CVE-2011-5027
Cross-site scripting XSS vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler...
CVE-2011-5027
Cross-site scripting XSS vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler...
[SECURITY] Fedora 16 Update: kdesdk-4.7.1-1.fc16
A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays designer's UI files lokalize: computer-aided translation...
Sql injection
SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...
CVE-2008-2093
SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...
CVE-2008-2093
SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...