7423 matches found
Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting
Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...
Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting
source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject html and script code into the Web...
FlatNuke 2.5.5 - footer.php Multiple Cross-Site Scripting Vulnerabilities
FlatNuke 2.5.5 - footer.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
FlatNuke 2.5.5 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into...
Naxtor E-directory 1.0 - Message.asp Cross-Site Scripting
Naxtor E-directory 1.0 - Message.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/14468/info Naxtor E-directory is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
Naxtor E-directory 1.0 - 'Message.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14468/info Naxtor E-directory is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject html and script code into the...
galeon, mozilla security update
CentOS Errata and Security Advisory CESA-2005:587-01 Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgro...
devhelp, mozilla security update
CentOS Errata and Security Advisory CESA-2005:587 Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup...
security flaw
Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords...
Fedora Core 3 : mozilla-1.7.10-1.3.1 (2005-616)
Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found in the way Mozilla handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or...
Fedora Core 4 : epiphany-1.6.3-2 (2005-620)
Epiphany is a simple GNOME web browser based on the Mozilla rendering engine. There were several security flaws found in the mozilla package, which epiphany depends on. Users of epiphany are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not...
firefox security update
CentOS Errata and Security Advisory CESA-2005:586 An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source We...
security flaw
Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords...
Important: Red Hat Security Advisory: firefox security update
An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...
Fedora Core 4 : firefox-1.0.6-1.1.fc4 (2005-605)
Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...
Fedora Core 3 : firefox-1.0.6-1.1.fc3 (2005-603)
Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...
SUSE-SA:2005:034: opera
The remote host is missing the patch for the advisory SUSE-SA:2005:034 opera. The web browser Opera has been updated to version 8.01 to fix various security-related bugs. Fixed XMLHttpRequest redirect vulnerability reported in Secunia Advisory 15008. Fixed cross-site scripting vulnerability...
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service
source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282. This issue was identified by...
CVE-2002-1881
CVE-2002-1881 affects Macromedia Flash Player 4.0 r12–6.0.47.0. A remote attacker can cause a browser crash (DoS) by feeding malformed Flash Shockwave (.SWF) content; ROT13-encoding the body while leaving headers unchanged demonstrates the issue. No further exploit details or remediation are prov...
CVE-2002-1881
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...