1004 matches found
CVE-2002-2436
The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...
CVE-2010-5069: Exposure of Sensitive Information to an Unauthorized Actor
The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...
CVE-2002-2436: Exposure of Sensitive Information to an Unauthorized Actor
The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...
CVE-2002-2435: Exposure of Sensitive Information to an Unauthorized Actor
The Cascading Style Sheets CSS implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
PT-2011-1256
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8.0 and earlier Description The issue is related to the Cascading Style Sheets CSS implementation, specifically the handling of the :visited pseudo-class. This allows remote attackers to obtain sensitive...
PT-2011-1999
Name of the Vulnerable Software and Affected Versions Google Chrome version 4 Description The Cascading Style Sheets CSS implementation does not properly handle the :visited pseudo-class, allowing remote attackers to obtain sensitive information about visited web pages via a crafted HTML document...
PT-2011-1257
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 4.0 Thunderbird versions prior to 3.3 SeaMonkey versions prior to 2.1 Description The CSS implementation does not properly handle the :visited pseudo-class, allowing remote attackers to obtain sensitive...
Xxe
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4504
The CVE-2011-4504 entry concerns the UPnP IGD implementation in the Pseudo ICS UPnP software used by ZyXEL P-330W. The vulnerability arises in the UPnP AddPortMapping action processed on the WAN interface, related to an “external forwarding” issue, enabling remote attackers to establish arbitrary...
CVE-2011-4504: Undefined Security Weakness
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
SLP (Service Location Protocol) Denial Of Service
!/usr/bin/python ''' ================================== Pseudo documentation ================================== ''' SLPick, extension DoS release by Nicolas Gregoire ''' ================================== Imports ================================== ''' import getopt import re import sys import...
Opera < 11.10 Multiple Vulnerabilities
Binary data 5988.prm...
Opera Browser Multiple Vulnerabilities Jul-11 (Windows)
The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02jul11.nasl 7006 2017-08-25 11:51:20Z teissa $ Opera Browser Multiple Vulnerabilities July-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...
CVE-2011-2635
The Cascading Style Sheets CSS implementation in Opera before 11.10 allows remote attackers to cause a denial of service application crash via vectors involving use of the :hover pseudo-class, in conjunction with transforms, for a floated element...
CVE-2011-2635: Undefined Security Weakness
The Cascading Style Sheets CSS implementation in Opera before 11.10 allows remote attackers to cause a denial of service application crash via vectors involving use of the :hover pseudo-class, in conjunction with transforms, for a floated element...
Microsoft Releases Version 2.1 of EMET Mitigation Toolkit
Microsoft has released a new version of its Enhanced Mitigation Experience Toolkit, a free download that gives IT staffs the ability to better defend against exploit attempts. The EMET now includes support, as well. EMET is a toolkit that essentially is designed to add exploit mitigation...
UBUNTU-CVE-2011-0133
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application...
Apple Webkit Font Glyph Layout Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...
CentOS Update for php CESA-2010:0919 centos4 i386
Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2010:0919 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7083)
Mozilla Firefox has been updated to version 3.5.10, fixing various bugs and security issues. - Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once per browsing session,...