Microsoft Internet Explorer IFRAME装载信息泄露漏洞

Bugtraq ID: 51065 CVE ID：CVE-2011-4689 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer 6到9版本中存在漏洞，在IFRAME加载尝试过程中，没有正确防止在违反同源策略所需的时间里采集数据，远程攻击者构建包含恶意JavaScript代码的WEB页，诱使用户解析，可判断目标用户浏览器缓存中的文件 0 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 9 Microsoft...

Fedora Update for arora FEDORA-2011-14756

Check for the Version of arora OpenVAS Vulnerability Test Fedora Update for arora FEDORA-2011-14756 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 15 Update: arora-0.11.0-3.fc15

Arora is a simple, cross platform web browser based on the QtWebKit engine. Currently, Arora is still under development, but it already has support for browsing and other common features such as web history and bookmarks...

[SECURITY] Fedora 16 Update: arora-0.11.0-3.fc16

Arora is a simple, cross platform web browser based on the QtWebKit engine. Currently, Arora is still under development, but it already has support for browsing and other common features such as web history and bookmarks...

Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51027/info The Opera Web browser is prone to multiple remote denial-of-service vulnerabilities and an unspecified vulnerability. An attacker can exploit these issues to cause the affected application to crash, denying service to legitimate users. Note: Th...

Opera Web Browser 11.60 - Denial of Service Multiple Vulnerabilities

Opera Web Browser 11.60 - Denial of Service Multiple Vulnerabilities source: https://www.securityfocus.com/bid/51027/info The Opera Web browser is prone to multiple remote denial-of-service vulnerabilities and an unspecified vulnerability. An attacker can exploit these issues to cause the affecte...

Apple Safari JavaScript Implementation Information Disclosure Vulnerability - Mac OS X

Apple Safari web browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-4687

CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...

Opera < 11.60 Multiple Vulnerabilities

Binary data 800845.prm...

Opera < 11.60 Multiple Vulnerabilities

Binary data 6105.prm...

JVN#61695284: PowerChute Business Edition vulnerable to cross-site scripting

PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version accordin...

USN-1277-1: Firefox vulnerabilities

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this fl...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

Chromium, V8: Multiple vulnerabilities

Background Chromium is an open-source web browser project. V8 is Google's open source JavaScript engine. Description Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details. Impact A context-dependent...

RHEL 6 : flash-plugin (RHSA-2011:1445)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1445 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

CentOS 4 / 5 : firefox (CESA-2011:1437)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

CentOS Update for firefox CESA-2011:1437 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for firefox RHSA-2011:1437-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability (2641690)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2718704 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...