CVE-2019-12970

XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of...

Microsoft Internet Explorer 10 MSHTML CElement::GetPlainTextInScope Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the third entry in that series. The below information is also available on my blog at http://blog.skylined.nl/20161103001.html. There you can find a repro that trigger...

CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

UBUNTU-CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

Cross site scripting

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

Opera Multiple Denial of Service Vulnerabilities - June12 (Mac OS X)

The host is installed with Opera and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultdosvulnjune12macosx.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Multiple Denial of Service Vulnerabilities - June12 Mac OS X Authors: Sooraj KS Copyright:...

Opera Multiple Denial of Service Vulnerabilities - June12 (Linux)

The host is installed with Opera and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultdosvulnjune12lin.nasl 6018 2017-04-24 09:02:24Z teissa $ Opera Multiple Denial of Service Vulnerabilities - June12 Linux Authors: Sooraj KS Copyright: Copyright ...

Opera Multiple Denial of Service Vulnerabilities (Jun 2012) - Mac OS X

Opera is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer overflow

Opera before 12.00 Beta allows remote attackers to cause a denial of service application hang via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element...

CVE-2012-3564: Undefined Security Weakness

Opera before 12.00 Beta allows remote attackers to cause a denial of service application hang via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element...

CVE-2011-5048

Multiple cross-site scripting XSS vulnerabilities in IBM Web Experience Factory aka WEF, formerly WebSphere Portlet Factory 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a 1 text INPUT element or 2 TEXTAREA element, related to an interaction between Smart Refresh...

CVE-2011-5048: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Web Experience Factory aka WEF, formerly WebSphere Portlet Factory 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a 1 text INPUT element or 2 TEXTAREA element, related to an interaction between Smart Refresh...

CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...

CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...

Integer overflow

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...

CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...

CVE-2011-1121

CVE-2011-1121 concerns Google Chrome prior to 9.0.597.107. The issue is an integer overflow in a TEXTAREA-related path, allowing a remote attacker to trigger a denial of service and potentially other impact. Affected product: Google Chrome (pre-9.0.597.107); root cause: integer overflow in a comp...

CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element...

CVE-2011-1121

Removed by vendor...

PT-2011-2886

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107 Description The issue involves an integer overflow that can be triggered via vectors involving a TEXTAREA element, potentially allowing remote attackers to cause a denial of service or have other...