CVE-2012-4143

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

CVE-2012-4143

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

CVE-2012-3689

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site...

Crlf injection

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

EUVD-2012-1671

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

GLSA-201207-02 : libxml2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201207-02 libxml2: User-assisted execution of arbitrary code The 'xmlXPtrEvalXPtrPart' function in xpointer.c contains an off-by-one error. Impact : A remote attacker could entice a user or automated system to open a specially...

GLSA-201207-03 : ChaSen: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201207-03 ChaSen: User-assisted execution of arbitrary code An error in chalib.c of ChaSen could cause a buffer overflow. Impact : A remote attacker could entice a user to open a specially crafted text file using ChaSen or an...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

TeX Live: Multiple vulnerabilities

Background TeX Live is a complete TeX distribution. Description Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details. Impact These vulnerabilities might allow user-assisted remote attackers to execute arbitrary code via a...

GLSA-201206-07 : nginx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-07 nginx: User-assisted execution of arbitrary code An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE='nginxmoduleshttpmp4' in order to be affected by this...

GLSA-201206-06 : OpenJPEG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-06 OpenJPEG: User-assisted execution of arbitrary code An error in jp2.c of OpenJPEG could allow an out-of-bounds write error. Impact : A remote attacker could entice a user to open a specially crafted JPEG file, possibly...

GLSA-201206-02 : QtGui: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-02 QtGui: User-assisted execution of arbitrary code An error in qtiffhandler.cpp could cause a buffer overflow. Impact : A remote attacker could entice a user to open a specially crafted TIFF image with an application linke...

GLSA-201206-04 : ArgyllCMS: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-04 ArgyllCMS: User-assisted execution of arbitrary code ArgyllCMS does not properly handle ICC profiles causing a use-after-free vulnerability. Impact : A remote attacker could entice a user to open a specially crafted imag...

CVE-2012-2090

Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to 1...

CVE-2012-3566

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application hang via JavaScript code that changes a form before submission...

CVE-2012-3558

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...

Privilege escalation

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application hang via JavaScript code that changes a form before submission...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2012-1190

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...