CVE-2010-1940

Removed by vendor...

Microsoft Internet Explorer Cross Site Data Leakage Vulnerability

This host is installed with Microsoft Internet Explorer web browser and is prone to cross site data leakage vulnerability. OpenVAS Vulnerability Test $Id: gbmsiecrosssitedataleakagevuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Internet Explorer Cross Site Data Leakage Vulnerability...

Google Chrome Cross Site Data Leakage Vulnerability (Windows)

This host is installed with Google Chrome Web Browser and is prone to cross site data leakage vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromecrosssitedataleakagevuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome Cross Site Data Leakage Vulnerability Windows Authors: Antu...

Microsoft Internet Explorer Cross Site Data Leakage Vulnerability

Microsoft Internet Explorer web browser is prone to cross site data leakage vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site...

Cross site scripting

Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage"...

CVE-2010-1851

Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage"...

CVE-2010-1852

Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site...

OneHTTPD <= 0.6 Directory Traversal Vulnerability - Active Check

OneHTTPD is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mini Web Server Cross Site Scripting and Directory Traversal Vulnerabilities

Mini Web Server is prone to a directory traversal vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

uHTTP Server GET Request Directory Traversal Vulnerability

uHTTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories within the context of the webserver. Information harvested may aid in launching...

Researchers Can Keep Web Servers Up During Attack

MIT researchers funded by DARPA U.S. Defense Department’s Defense Advanced Research Projects Agency have developed a system to keep web servers — or, for that matter, any Internet-connected computers — running even when they’re under attack. Read the full article. MIT News...

Code injection

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...

CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...

HTTP Session Cookies

The remote web application uses cookies to track authenticated users. By removing the cookies, one-by-one, and checking a protected page, it is possible to identify these cookies. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid44987; scriptversion "$Revision: 1.7 $";...

Multiple Web servers information leak

It's possible to access script sources and/or bypass access restrictions by using Windows 8.3 filenames and space characters...

httpdx 'USER' Command Remote Format String Vulnerability

The 'httpdx' program is prone to a remote format-string vulnerability. An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. The issue affects httpdx 1.5.2; other versions...

[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Core Security Technologies Advisory 2010.0121

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

Advisory ID Internal CORE-2010-0121 1. Advisory Information Advisory Id: CORE-2010-0121 Advisory URL:https://www.coresecurity.com/core-labs/advisories/filename-pseudonyms-vulnerabilities Date published: 2010-02-05 Date of last update: 2010-02-05 Vendors contacted: Cherokee team, Nginx team,...