4082 matches found
Design/Logic Flaw
Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...
CVE-2010-3796
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications...
Code injection
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications...
CVE-2010-3796
CVE-2010-3796 affects Safari RSS in Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. A Java applet in an RSS feed could modify the DOM, allowing remote attackers to obtain sensitive information via a crafted feed URL. The issue is mitigated in 10.6.5 and later (Apple Security Update HT4435; addressed ...
CVE-2010-3796
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications...
CVE-2010-3796: Exposure of Sensitive Information to an Unauthorized Actor
Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications...
PT-2010-5083
Name of the Vulnerable Software and Affected Versions Safari versions prior to 10.6.5 in Mac OS X 10.5.8 and 10.6.x Description The issue allows remote attackers to obtain sensitive information by using a feed: URL containing a Java applet that performs DOM modifications, as Safari does not block...
Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities
Binary data 5705.prm...
Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities
Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...
Mac OS X Multiple Vulnerabilities (Security Update 2010-007)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. This security update contains fixes for the following products : - AFP Server - Apache modperl - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services - diskdevcmds - Disk...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...
Mozilla Foundation Security Advisory 2010-73
Mozilla Foundation Security Advisory 2010-73 Title: Heap buffer overflow mixing document.write and DOM insertion Impact: Critical Announced: October 27, 2010 Reporter: Morten Krkvik Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.12 Firefox 3.5.15 Thunderbird 3.1.6 Thunderbird...
Mozilla Thunderbird < 3.0.10 Buffer Overflow
The installed version of Thunderbird is earlier than 3.0.10. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...
Mozilla Thunderbird 3.1 < 3.1.6 Buffer Overflow
The installed version of Thunderbird 3.1 is earlier than 3.1.6. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffe...
Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)
Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...
Flock Browser RSS Feed Cross site scripting Vulnerability
This host is installed with Flock browser and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodflockxsswin01.nasl 5394 2017-02-22 09:22:42Z teissa $ Flock Browser RSS Feed Cross site scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod...
Flock Browser RSS Feed Cross site scripting Vulnerability
Flock browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP RSS Reader Multiple Vulnerability
Exploit for php platform in category web applications ===================================== PHP RSS Reader Multiple Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...