CVE-2007-1819

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...

Unfixed XSS vulnerability at www.kempseyproperty.com.au

Security researcher CoNqUeRoR, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting www.kempseyproperty.com.au, which at the time of submission ranked 5849243 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007...

CVE-2007-0779

CVE-2007-0779 concerns a GUI overlay spoofing flaw in SeaMonkey prior to 1.0.8 (and Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2) where a large, transparent cursor via CSS3 hotspot could spoof UI elements such as the hostname or security indicators. The vulnerability allows remote observe...

Spoofing using custom cursor and CSS3 hotspot — Mozilla

David Eckel reported that browser UI elements--such as the host name and security indicators--could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area...

Buffer overflow

Buffer overflow in the ActSoft DVD-Tools ActiveX control dvdtools.ocx allows remote attackers to execute arbitrary code via a long DVDTOOLS.OpenDVD property value...

CVE-2007-0976

Buffer overflow in the ActSoft DVD-Tools ActiveX control dvdtools.ocx allows remote attackers to execute arbitrary code via a long DVDTOOLS.OpenDVD property value...

CVE-2007-0976

Buffer overflow in the ActSoft DVD-Tools ActiveX control dvdtools.ocx allows remote attackers to execute arbitrary code via a long DVDTOOLS.OpenDVD property value...

Firefox: serious cookie stealing / same-domain bypass vulnerability

There is a serious vulnerability in Mozilla Firefox, tested with 2.0.0.1, but quite certainly affecting all recent versions. The problem lies in how Firefox handles writes to the 'location.hostname' DOM property. It is possible for a script to set it to values that would not otherwise be accepted...

CVE-2007-0412: Undefined Security Weakness

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files...

CVE-2007-0371

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRPBDc.SelectedFolder property value...

CVE-2006-6709

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6708

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-6708

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-6709

CVE-2006-6709 affects MGinternet Property Site Manager. The NVD description identifies multiple SQL injection vulnerabilities in this product, exploitable via input parameters: (1) p to detail.asp; (2) l, (3) typ, (4) loc to listings.asp; and (5) Password or (6) Username to admin_login.asp. Root ...

CVE-2006-6708

CVE-2006-6708 describes a cross-site scripting (XSS) vulnerability in MGinternet Property Site Manager, specifically in the listings.asp handler. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the s parameter. The available documents do not provid...

CVE-2006-6709

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6709: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6708: Undefined Security Weakness

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Multiple Mozilla Firefox / Thunderbird / Seamonkey security vulnerabilities

Crossite scripting with functions prototypes. Information leak. Buffer overflows on oversized Content-Type fields in messages. Memory corruption on SVG header. Crossite scripting with img.src. DoS. JavaScript watchpoint privilege escalation. CSS image cursor property buffer overflow. Multiple...

CSS cursor image buffer overflow (Windows only) — Mozilla

Frederik Reiss reported a crash when using the CSS cursor property to set the cursor to certain images on Windows. A miscalculated size during conversion of the image to a Windows bitmap can result in a heap buffer overflow which could be used to compromise the victim's computer...