JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)

JScript is an interpreted, object-based scripting language that is often used to make Web sites more flexible or interactive. A remote code execution vulnerability has been reported in the way that the JScript scripting engine decodes script in Web pages. The vulnerability is due to a memory...

banner NSE Script

A simple banner grabber which connects to an open TCP port and prints out anything sent by the listening service within five seconds. The banner will be truncated to fit into a single line, but an extra line may be printed for every increase in the level of verbosity requested on the command line...

CVE-2006-0830

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetti...

CVE-2006-0830

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetti...

CVE-2006-0830

CVE-2006-0830 affects the Internet Explorer scripting engine. A web page triggering a recurrent infinite loop in Javascript or VBScript can consume stack space, potentially causing a denial of service and, per the description, may allow arbitrary code execution by resetting the loop’s location va...

CVE-2006-0830: Undefined Security Weakness

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetti...

CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

DEBIAN-CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2005-0508

CVE-2005-0508 affects Batik’s Squiggle component prior to Batik 1.5.1. The vulnerability allows bypassing certain access controls via features of the Rhino JavaScript engine due to a script security issue. Root cause is tied to Rhino scripting security in Squiggle. Affected software is Batik (Squ...

[SA14336] Batik Squiggle Browser Unspecified Security Bypass

TITLE: Batik Squiggle Browser Unspecified Security Bypass SECUNIA ADVISORY ID: SA14336 VERIFY ADVISORY: http://secunia.com/advisories/14336/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Batik 1.x http://secunia.com/product/4685/ DESCRIPTION: A vulnerability h...

CVE-2005-0508: Undefined Security Weakness

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2003-0763

Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...

CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

CVE-2003-0763

CVE-2003-0763 describes a Cross-site scripting (XSS) vulnerability in the Escapade Scripting Engine (ESP). The issue arises from unsanitized input in the method parameter (demonstrated via the PAGE parameter), enabling remote attackers to inject arbitrary script. Documents indicate the affected c...

CVE-2003-0764

The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...

CVE-2003-0763

Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...

CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...