3422 matches found
Mozilla Thunderbird < 3.0.10 Buffer Overflow
The installed version of Thunderbird is earlier than 3.0.10. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...
Mozilla Thunderbird 3.1 < 3.1.6 Buffer Overflow
The installed version of Thunderbird 3.1 is earlier than 3.1.6. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffe...
Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)
Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...
Flock Browser RSS Feed Cross site scripting Vulnerability
This host is installed with Flock browser and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodflockxsswin01.nasl 5394 2017-02-22 09:22:42Z teissa $ Flock Browser RSS Feed Cross site scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod...
Flock Browser RSS Feed Cross site scripting Vulnerability
Flock browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP RSS Reader Multiple Vulnerability
Exploit for php platform in category web applications ===================================== PHP RSS Reader Multiple Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...
CVE-2010-3262
Cross-site scripting XSS vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
Cross site scripting
Cross-site scripting XSS vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2010-3262
The CVE-2010-3262 affects Flock Browser 3.x prior to 3.0.0.4114, where a crafted RSS feed can trigger a cross-site scripting (XSS) vulnerability. The issue is a client-side XSS in the RSS feed handling, allowing arbitrary script or HTML execution when the feed is viewed. Public sources consistent...
CVE-2010-3262
Cross-site scripting XSS vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
[FLOCK-SA-2010-02] Flock Browser: A malicious RSS feed can bypass cross origin protection (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FLOCK-SA-2010-02 http://flock.com/security/ Title: A malicious RSS feed can bypass cross origin protection XSS Impact: High Announced on: 2010-09-09 Affected Products: Flock 3 versions prior to 3.0.0.4114 CVEs cve.mitre.org: CVE-2010-3262 Details: A...
Fedora 12 : rekonq-0.5.0-2.fc12 (2010-12255)
Fixes CVE-2010-2536 New upstream version with following changes: improved adblock, automagically updating filter lists +abp scheme support RSS support new urlbar tech preview: it's just nice and more will come.. auto-scrolling downloads history tracked SSL Info support Bookmarks & history panels...
Microsoft Windows Live Email - dwmapi.dll DLL Hijacking
Microsoft Windows Live Email - dwmapi.dll DLL Hijacking / Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from...
Microsoft Windows Live Email - 'dwmapi.dll' DLL Hijacking
/ Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .nws .rss / include...
About the security content of Safari 5.0.1 and Safari 4.1.1
About the security content of Safari 5.0.1 and Safari 4.1.1 Last Modified: July 28, 2010 Article: HT4276 Summary This document describes the security content of Safari 5.0.1 and Safari 4.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...
dedecms 5.6 RSS subscription page injection vulnerability-vulnerability warning-the black bar safety net
EXP: the uploads/plus/rss. php? tid=1&Cs1=1&Cs2%2 9% 2 9%20AND%2 0% 2 2% 2 7% 2 2%20AND%20updatexml%2 8 1,%28SELECT%20CONCAT%280x5b,uname,0x3a,MID%28pwd,4,1 6% 2 9,0x5d%2 9%20FROM%20dedeadmin%29,1%2 9%2 3%2 70=1 The use of the environment: GPC off There updatexml function...
CVE-2010-1778
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...
Cross site scripting
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...
CVE-2010-1778
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...
CVE-2010-1778
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...