6053 matches found
CVE-2002-0500
The CVE-2002-0500 entry describes a vulnerability in Internet Explorer 5.0–6.0 where a remote attacker can determine the existence of local files on a client by abusing an IMG tag with a dynsrc attribute that references the target file, causing the image object to reveal information such as file ...
CVE-2002-0500: Undefined Security Weakness
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...
CVE-2002-0191
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability...
IE allows universal Cross Site Scripting (TL#002)
Thor Larholm security advisory TL002 ------------------------------------- By Thor Larholm, Denmark. 16 April 2002 HTML Format: http://jscript.dk/adv/TL002/ Topic: IE allows universal Cross Site Scripting. Discovery date: 18 March 2002. Severity: High Affected applications: ----------------------...
CVE-2002-0077: Undefined Security Weakness
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable...
Retrieving information on local files in IE (GM#003-IE)
GreyMagic Security Advisory GM003-IE ===================================== By GreyMagic Software, Israel. 27 Mar 2002. Available in HTML format at http://security.greymagic.com/adv/gm003-ie/. Topic: Retrieving information on local files in IE. Discovery date: 18 Feb 2002. Affected applications:...
Unauthorized access via Java Web Start
It's possible to pass property name="NAME" value="VALUE"/ with names different from jnlp. and javaws., it allows to leave sandbox...
FireWall-1 Fastmode Vulnerability
Hi there, service pack 3 is available for FireWall-1 4.1 and in addition to the things listed in the release notes it fixes the following little... errrrm... idiosyncrasy. The HTML version of the advisory is available at http://www.dataprotect.com/fw1/ Merry Christmas and a happy New Year -Thomas...
Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware
Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...
PT-1997-1170 · Next · Next Netinfo
Name of the Vulnerable Software and Affected Versions: NeXT NetInfo affected versions not specified Description: The issue allows local users to gain root privileges or conduct a denial of service due to a problem with the writers property. Recommendations: At the moment, there is no information...
Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
More info at https://symfony.com/blog/cve-2026-48808-sandbox-property-allowlist-bypass-via-the-column-filter-under-sourcepolicyinterface...
