[SECURITY] Fedora Core 6 Update: epiphany-2.16.3-2.fc6

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora Core 5 Update: epiphany-2.14.3-4.fc5

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora Core 5 Update: seamonkey-1.0.8-0.5.1.fc5

SeaMonkey former Mozilla is an open-source web browser, designed for stan dards compliance, performance and portability...

[SECURITY] Fedora Core 5 Update: firefox-1.5.0.10-1.fc5

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RHEL 4 : Firefox (RHSA-2007:0079)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

CentOS 4 : firefox (CESA-2007:0079)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

CentOS 3 / 4 : seamonkey (CESA-2007:0077)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007 Packages for Red Hat Enterprise Linux 4 have been...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007 Packages for Red Hat Enterprise Linux 4 have been...

Critical: Red Hat Security Advisory: Firefox security update

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Macrovision / InstallShield InstallFromTheWeb buffer overflows

Overview Macrovision / InstallShield InstallFromTheWeb contains multiple buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description InstallShield InstallFromTheWeb is a web-based software installation product for Microsoft Windows systems...

SUSE-SA:2006:053: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2006:053 flash-player. Multiple input validation errors have been identified in the Macromedia Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered...

SUSE-SA:2006:061: opera

The remote host is missing the patch for the advisory SUSE-SA:2006:061 opera. The web browser Opera has been updated to fix 2 security problems. CVE-2006-4339: Opera was affected by the RSA signature checking problem found in openssl, since it is statically linked against openssl. CVE-2006-4819: ...

JVN#84746611 Ariel AirOne series cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected Ariel AirOne ProjectA v4.6.1 Ariel MultiScheduler v4.6.3 For more information, refer to the vendor's website...

LizardTech DjVu Browser Plug-in buffer overflow vulnerabilities

Overview The LizardTech DjVu Browser Plug-in contains multiple buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The LizardTech DjVu Browser Plug-in is an application that allows the user to view DjVu documents in a web browser. It is...

Internet Explorer for Windows Mobile远程WML内容拒绝服务漏洞

Internet Explorer for Windows Mobile是为移动设备所设计的WEB浏览器。 IE for Windows Mobile在处理畸形WML文件时存在漏洞，远程攻击者可能利用此漏洞对移动设备执行拒绝服务攻击。 如果用户使用IE for Windows Mobile浏览了包含有畸形内容的WML页面的话，就会在浏览器中触发溢出，导致拒绝服务，受影响设备的用户必须执行断电重置才能恢复正常操作。 Microsoft Internet Explorer for Windows Mobile 5.0...

Mozilla Firefox JavaScript窃取键盘动作漏洞

Mozilla Firefox是一款流行的开源WEB浏览器。 Firefox在处理用户文件上传时存在漏洞，远程恶意网站可能利用此漏洞非授权获取用户机器上的文件。 在所有现代的浏览器中用于向远程服务器上传用户指定文件的INPUT TYPE=FILE表单字段都受到了额外的保护，以防止脚本随意的选择将要发送的文件，或未经用户确认自动提交表单。例如，无法设置或更改.value参数，任何对.type的更改都会重置字段的内容。 但Firefox允许恶意脚本将精心选择的用户键盘动作重新定向到隐藏的文件上传字段，以构建特殊的文件名，然后提交表单。...

JVN#28356427 ColdFusion cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct a session hijacking. Solution Products Affected ColdFusion MX 7.X For more information, refer to the vendor's website...

ELinks: Arbitrary Samba command execution

Background ELinks is a text mode web browser. Description Teemu Salmela discovered an error in the validation code of "smb://" URLs used by ELinks, the same issue as reported in GLSA 200612-16 concerning Links. Impact A remote attacker could entice a user to browse to a specially crafted "smb://"...

JVN#80271113 MODx cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected MODx 0.9.2.x and earlier...

JVN#05123538 CGI RESCUE WebFORM vulnerable to cross-site scripting

Impact An abitrary script may be executed on the user's web browser. Solution Products Affected WebFORM 4.3 and earlier According to the vendor's website, another product Web Mailer also contains a similar vulnerability. We have confirmed that the fixed version of the Web Mailer is also released...