1011 matches found
CVE-2010-2106
Removed by vendor...
CVE-2003-1591
NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service console hang via a large number of FTP sessions, which are not properly handled during an NLM unload...
CVE-2003-1591
CVE-2003-1591 affects NWFTPD.nlm in the FTP server of Novell NetWare 6.0 (before SP4) and 6.5 (before SP1). The vulnerability allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions not properly handled during an NLM unload. Connections...
Apache < 2.2.15 Multiple Vulnerabilities
According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.15. Such versions are potentially affected by multiple vulnerabilities : - A TLS renegotiation prefix attack is possible. CVE-2009-3555 - The 'modproxyajp' module returns the wrong status code if it...
Apache Httpd < 2.2.15 : mod_isapi module unload flaw
A flaw was found with within modisapi which would attempt to unload the ISAPI dll when it encountered various error states. This could leave the callbacks in an undefined state and result in a segfault. On Windows platforms using modisapi, a remote attacker could send a malicious request to trigg...
Fedora Core 11 FEDORA-2009-10639 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-10639. OpenVAS Vulnerability Test $Id: fcore200910639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10639 kernel Authors: Thomas Reinke Copyright: Copyright c 2009...
SuSE 10 Security Update : gecko-sdk and mozilla-xulrunner (ZYPP Patch Number 5811)
This update backports the latest security fixes to the Mozilla XULRunner engine. It fixes following security issues : - The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocatio...
security flaw
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client...
security flaw
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects...
security flaw
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects...
onunload.txt
in nearly all browsers you can overwrite the window location in the "onunload" event. that means you can "keep" the user on a site. when you type a new url in the address-bar, javascript overwrites it. thats a paradies for fishers, porn-site-hoster etc...... here the html/javascript code:...