7437 matches found
[SECURITY] Fedora 8 Update: kazehakase-0.5.6-1.fc8.1
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-11.fc8
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
[SECURITY] Fedora 8 Update: epiphany-2.20.3-8.fc8
epiphany is a simple GNOME web browser based on the Mozilla rendering engine...
Critical: Red Hat Security Advisory: firefox security update
An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...
Microsoft XML Core Services Transfer Encoding Cross Domain Information Disclosure Vulnerability
Description Microsoft XML Core Services MSXML is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to harvest potentially sensitive information from a web page in another domain...
Microsoft XML Core Services DTD Cross Domain Information Disclosure Vulnerability
Description Microsoft XML Core Services MSXML is prone to a cross-domain information-disclosure vulnerability because the application fails to properly handle certain error checks. An attacker can exploit this issue to harvest potentially sensitive information from a web page in another domain...
SA-2008-069 - CCK for 5.x and 6.x - XSS vulnerabilities
The Content Construction Kit CCK allows certain privileged users to add custom fields to content types using a web browser. Some field labels and content-type names are displayed without appropriate filtering in the administrative interface. Malicious users with the "administer content" permissio...
US-CERT Technical Cyber Security Alert TA08-309A -- Adobe Reader and Acrobat Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-309A Adobe Reader and Acrobat Vulnerabilities Original release date: November 04, 2008 Last revised: -- Source: US-CERT Systems Affected Adobe Reader version 8.1.2 and earlier Adobe Acrob...
Adobe Reader and Acrobat util.printf() JavaScript function stack buffer overflow
Overview Adobe Reader and Acrobat contain a stack buffer overflow in the util.printf JavaScript function, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Reader is software designed to view Portable Document Format PDF files...
Debian Security Advisory DSA 1649-1 (iceweasel)
The remote host is missing an update to iceweasel announced via advisory DSA 1649-1. OpenVAS Vulnerability Test $Id: deb16491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1649-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Opera Web Browser 9.62 - History Search Input Validation
Opera Web Browser 9.62 - History Search Input Validation source: https://www.securityfocus.com/bid/32015/info Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature. Attacker-supplied HTML and script code would run in...
Google Chrome Web Browser FTP Client XSS Vulnerability
Google Chrome Web Browser is prone to a cross-site scripting XSS vulnerability. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
Opera Web Browser 9.62 - History Search Input Validation
source: https://www.securityfocus.com/bid/32015/info Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing th...
Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting
Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...
Opera Web Browser Multiple XSS Vulnerability (Linux)
The host is installed with Opera Web Browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Linux Authors: Chandan S Copyright: Copyrigh...
Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting
source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...
RHEL 2.1 / 3 / 4 / 5 : lynx (RHSA-2008:0965)
An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...
Opera Web Browser HTML注入和跨站脚本漏洞
BUGTRAQ ID: 31842 CNCAN ID：CNCAN-2008102207 Opera Web Browser是一款开放源代码的WEB浏览器。 Opera Web Browser存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 -如果链接使用JavaScript URL触发Opera快速转发功能，当用户激活快速转发，脚本将运行在当前页面上，当页面处于帧中，脚本将不正确的最外面页面上执行，而不是URL定位的页面上，这可导致脚本以不相关内容上下文执行。 -当Opera预览新FEED时，部分脚本没有正确阻止，这些脚本能够订阅用户到任意攻击者选择的FEED...
