4090 matches found
CVE-2011-5047
Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...
PT-2012-2027
Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the style parameter in the status rrd graph.php...
CVE-2011-5047: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...
Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...
Mozilla Products Multiple Information Disclosure Vulnerabilities - (Windows)
The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - Windows Authors:...
Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X
The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X...
Google Chrome Multiple Information Disclosure Vulnerabilities (Linux)
The host is installed with Google Chrome and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultinfodiscvulnlin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Information Disclosure Vulnerabilities Linux Authors: Rachana...
Opera Multiple Information Disclosure Vulnerabilities (Mac OS X)
The host is installed with Opera and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Multiple Information Disclosure Vulnerabilities Mac OS X Authors: Rachana Shetty Copyright:...
Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities
The host is installed with Internet Explorer and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbmsiemultinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities Authors: Soora...
Google Chrome Multiple Information Disclosure Vulnerabilities (Windows)
The host is installed with Google Chrome and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultinfodiscvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Information Disclosure Vulnerabilities Windows Authors: Rachan...
Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities
Internet Explorer is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Products Multiple Information Disclosure Vulnerabilities - Mac OS X
Mozilla Firefox/Seamonkey/Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-5069
The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...
Design/Logic Flaw
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2010-5069
The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...
CVE-2010-5074
The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...
Design/Logic Flaw
The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...
CVE-2002-2435
The Cascading Style Sheets CSS implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2002-2436
The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...
ewebeditor(PHP) Ver 3.8 present an arbitrary file upload 0day-vulnerability warning-the black bar safety net
titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...