3081 matches found
CVE-2005-1158
Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...
CVE-2005-1158
Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...
CVE-2005-1158
CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...
CVE-2005-1158
Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...
Arbitrary code execution from Firefox sidebar panel II — Mozilla
Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to install malicious code or steal data without user...
Multiple Vendor ICMP Message Handling - Denial of Service
source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...
firefox -- arbitrary code execution in sidebar panel
A Mozilla Foundation Security Advisory reports: Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to...
HP-UX Security patch : PHSS_26918
The remote host is missing HP-UX Security Patch number PHSS26918 . Sec. Vulnerability in SNMP rev. 16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17469; scriptversion"1.6";...
HP-UX Security patch : PHSS_24842
The remote host is missing HP-UX Security Patch number PHSS24842 . Sec. Vulnerability in OV NNM %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17464; scriptversion"1.6";...
HP-UX Security patch : PHKL_17012
The remote host is missing HP-UX Security Patch number PHKL17012 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17396; scriptversion"1.6";...
HP-UX Security patch : PHSS_27783
The remote host is missing HP-UX Security Patch number PHSS27783 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17485;...
SUSE-SA:2005:012: imap
The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...
HP-UX PHCO_24446 : HPSBUX0212-227 Sec. Vulnerability in ied(1)
s700800 11.00 ied1 patch : the ied1 command reveals data improperly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24446. The text itself is copyright C Hewlett-Packard Development Company, L.P...
HP-UX Security patch : PHNE_25217
The remote host is missing HP-UX Security Patch number PHNE25217 . Sec. Vulnerability in telnetd rev.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16551; scriptversion"1.7";...
HP-UX Security patch : PHSS_28468
The remote host is missing HP-UX Security Patch number PHSS28468 . SSRT2429 Potential Security Vulnerability in xfs %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17038;...
HP-UX Security patch : PHNE_9105
The remote host is missing HP-UX Security Patch number PHNE9105 . SYN Flooding Security Vulnerability in HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17041;...
HP-UX PHCO_21567 : HPSBUX0005-113 Sec. Vulnerability with shutdown command (rev.1)
s700800 11.04 VVOS patch for shutdown1M : shutdown1M improperly handles input variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO21567. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHNE_21090 : HPSBUX0005-114 Sec. Vulnerability in BIND (rev.1)
s700800 11.04 VVOS Bind 4.9.7 components : Security vulnerability in the BIND executable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE21090. The text itself is copyright C Hewlett-Packard Development...
HP-UX Security patch : PHSS_13724
The remote host is missing HP-UX Security Patch number PHSS13724 . Security Vulnerability in CDE on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16922; scriptversion"1.7";...
HP-UX Security patch : PHSS_28173
The remote host is missing HP-UX Security Patch number PHSS28173 . Potential Sec. Vulnerability in rpc.ttdbserver %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17091;...