CVE-2013-6932

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...

GLSA-201312-11 : Win32 Codecs: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201312-11 Win32 Codecs: User-assisted execution of arbitrary code A heap-based buffer overflow exists when handling Shockwave Flash files. Impact : A remote attacker could entice a user to open a specially crafted Flash file using...

CVE-2013-6672

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations...

CVE-2013-6672

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations...

GLSA-201311-11 : CTorrent: User-assisted arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201311-11 CTorrent: User-assisted arbitrary code execution CTorrent contains a stack-based buffer overflow in the btFiles::BuildFromMI function in trunk/btfiles.cpp. Impact : A remote attacker could entice a user to open a special...

GLSA-201311-08 : Netpbm: User-assisted arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201311-08 Netpbm: User-assisted arbitrary code execution A stack-based buffer overflow exists in converter/ppm/xpmtoppm.c in Netpbm. Impact : A remote attacker could entice a user to open a specially crafted XMP file using Netpbm,...

CVE-2013-5168

CVE-2013-5168 affects Apple Mac OS X before 10.9. The vulnerability in the Console component allows a user-assisted remote attacker to execute arbitrary applications by triggering a log entry with a crafted attached URL. This payload mechanism relies on the Console/logging workflow to run arbitra...

CVE-2013-2926

Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2013-2926

Removed by vendor...

GLSA-201310-06 : Aircrack-ng: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201310-06 Aircrack-ng: User-assisted execution of arbitrary code A buffer overflow vulnerability has been discovered in Aircrack-ng. Impact : A remote attacker could entice a user to open a specially crafted dump file using...

GLSA-201309-19 : TPP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201309-19 TPP: User-assisted execution of arbitrary code TPP templates may contain a --exec clause, the contents of which are automatically executed without confirmation from the user. Impact : A remote attacker could entice a use...

TPP: User-assisted execution of arbitrary code

Background TPP is an ncurses-based text presentation tool. Description TPP templates may contain a --exec clause, the contents of which are automatically executed without confirmation from the user. Impact A remote attacker could entice a user to open a specially crafted file using TPP, possibly...

GLSA-201309-04 : Snack: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201309-04 Snack: User-assisted execution of arbitrary code The GetWavHeader function in jkSoundFile.c does not have boundary checks when parsing format sub-chunks or unknown sub-chunks. Impact : A remote attacker could entice a us...

CVE-2013-5645

Multiple cross-site scripting XSS vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in 1 new or 2 draft mode, related to compose.inc; and 3 might allow remote authenticated users to injec...

CVE-2013-5645

Multiple cross-site scripting XSS vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in 1 new or 2 draft mode, related to compose.inc; and 3 might allow remote authenticated users to injec...

CVE-2013-5645

Multiple cross-site scripting XSS vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in 1 new or 2 draft mode, related to compose.inc; and 3 might allow remote authenticated users to injec...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in 1 new or 2 draft mode, related to compose.inc; and 3 might allow remote authenticated users to injec...

CVE-2013-5645

Multiple cross-site scripting XSS vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in 1 new or 2 draft mode, related to compose.inc; and 3 might allow remote authenticated users to injec...

CVE-2013-4653

Multiple cross-site scripting XSS vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System AMDS before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and...

CVE-2013-1717

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging...