Critical: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Microsoft XML Core Services Transfer Encoding Cross Domain Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to harvest potentially sensitive information from a web page in another domain...

Microsoft XML Core Services DTD Cross Domain Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to a cross-domain information-disclosure vulnerability because the application fails to properly handle certain error checks. An attacker can exploit this issue to harvest potentially sensitive information from a web page in another domain...

SA-2008-069 - CCK for 5.x and 6.x - XSS vulnerabilities

The Content Construction Kit CCK allows certain privileged users to add custom fields to content types using a web browser. Some field labels and content-type names are displayed without appropriate filtering in the administrative interface. Malicious users with the "administer content" permissio...

US-CERT Technical Cyber Security Alert TA08-309A -- Adobe Reader and Acrobat Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-309A Adobe Reader and Acrobat Vulnerabilities Original release date: November 04, 2008 Last revised: -- Source: US-CERT Systems Affected Adobe Reader version 8.1.2 and earlier Adobe Acrob...

Adobe Reader and Acrobat util.printf() JavaScript function stack buffer overflow

Overview Adobe Reader and Acrobat contain a stack buffer overflow in the util.printf JavaScript function, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Reader is software designed to view Portable Document Format PDF files...

Debian Security Advisory DSA 1649-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1649-1. OpenVAS Vulnerability Test $Id: deb16491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1649-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Opera Web Browser 9.62 - History Search Input Validation

Opera Web Browser 9.62 - History Search Input Validation source: https://www.securityfocus.com/bid/32015/info Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature. Attacker-supplied HTML and script code would run in...

Google Chrome Web Browser FTP Client XSS Vulnerability

Google Chrome Web Browser is prone to a cross-site scripting XSS vulnerability. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

Opera Web Browser 9.62 - History Search Input Validation

source: https://www.securityfocus.com/bid/32015/info Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing th...

Opera Web Browser Multiple XSS Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Linux Authors: Chandan S Copyright: Copyrigh...

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

RHEL 2.1 / 3 / 4 / 5 : lynx (RHSA-2008:0965)

An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...

Opera Web Browser HTML注入和跨站脚本漏洞

BUGTRAQ ID: 31842 CNCAN ID：CNCAN-2008102207 Opera Web Browser是一款开放源代码的WEB浏览器。 Opera Web Browser存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 -如果链接使用JavaScript URL触发Opera快速转发功能，当用户激活快速转发，脚本将运行在当前页面上，当页面处于帧中，脚本将不正确的最外面页面上执行，而不是URL定位的页面上，这可导致脚本以不相关内容上下文执行。 -当Opera预览新FEED时，部分脚本没有正确阻止，这些脚本能够订阅用户到任意攻击者选择的FEED...

DSquare Exploit Pack: D2SEC_OPERAXSS

Name| d2secoperaxss ---|--- CVE| CVE-2008-4696 Exploit Pack| D2ExploitPack Description| Opera Web Browser History Search Input Validation Vulnerability Notes|...

Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...

JVN#03300113 Blosxom vulnerable to cross-site scripting

Blosxom is an open source weblog system. Blosxom contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest udpate provided by the developer. Products Affected Blosxom 2.1.1 and earlier...

Nokia Web浏览器数组排序拒绝服务漏洞

BUGTRAQ ID: 31703 Nokia Web浏览器之前被称为Nokia Mini Map浏览器，是为S60手机平台所开发的web浏览器。 Nokia Web浏览器基于S60WebKit，而S60WebKit的JavaScript核心对递归数组调用了sort函数。如果用户受骗访问了恶意的HTML页面的话，就会导致浏览器崩溃。 Nokia Web Browser for S60 Nokia ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nokia.com foo = new Array;...