7437 matches found
[ GLSA 200803-09 ] Opera: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Google Android Web Browser - .BMP File Integer Overflow
Google Android Web Browser - .BMP File Integer Overflow source: https://www.securityfocus.com/bid/28006/info Android Web Browser is prone to an integer-overflow vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in th...
Google Android Web Browser - .GIF File Heap Buffer Overflow
Google Android Web Browser - .GIF File Heap Buffer Overflow source: https://www.securityfocus.com/bid/28005/info Android Web Browser is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized...
Google Android Web Browser - '.BMP' File Integer Overflow
source: https://www.securityfocus.com/bid/28006/info Android Web Browser is prone to an integer-overflow vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts wi...
Opera: Multiple vulnerabilities
Background Opera is a fast web browser that is available free of charge. Description Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path CVE-2008-1080. Max Leonov found out that image comments might be treated as scripts,...
JVN#53757727 Nagios cross-site scripting vulnerability
Nagios from Nagios.org is software that monitors network services, hosts, and other resources. Nagios contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Update the software to the latest version accordi...
Opera Web浏览器9.26修复多个安全漏洞
BUGTRAQ ID: 27901 Opera是一款流行的WEB浏览器，支持多种平台。 Opera Web浏览器的9.26之前版本中存在多个安全漏洞，可能允许恶意用户执行跨站脚本攻击、泄露敏感信息或绕过某些安全限制。 1 当用户键入文件输入时，脚本可能导致忽略一些键盘动作。如果脚本能够诱骗用户相信正在键入正常的文件输入，而不让用户看到已经忽略了键盘动作，就可能导致输入指向计算机上的文件路径，然后在未经用户交互的情况下上传文件。 2 图形属性中可能包含有自定义标注。在显示图形属性时，Opera可能将这些标注处理为脚本，导致在错误的安全环境中运行脚本。 3...
Microsoft IE HTML渲染远程内存破坏漏洞（MS08-010）
BUGTRAQ ID: 27668 CVECAN ID: CVE-2008-0076 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer解析带有特定布局组合的HTML的方式中存在一个远程执行代码漏洞，攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer...
Opera < 9.26 Multiple Vulnerabilities
The version of Opera installed on the remote host reportedly is affected by several issues : - Simulated text input could trick users into uploading arbitrary files. - Image properties comments containing script will be run when displaying the image properties, leading to code execution in the...
Debian Security Advisory DSA 1489-1 (iceweasel)
The remote host is missing an update to iceweasel announced via advisory DSA 1489-1. OpenVAS Vulnerability Test $Id: deb14891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1489-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Fedora 8 : Miro-1.1-3.fc8 / blam-1.8.3-13.fc8 / chmsee-1.0.0-1.28.fc8 / devhelp-0.16.1-5.fc8 / etc (2008-1535)
Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed web content. A web page containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. CVE-2008-0412, CVE-2008-0413...
Fedora 7 : Miro-1.1-3.fc7 / chmsee-1.0.0-1.28.fc7 / devhelp-0.13-13.fc7 / epiphany-2.18.3-6.fc7 / etc (2008-1435)
Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed web content. A web page containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. CVE-2008-0412, CVE-2008-0413...
[SECURITY] Fedora 8 Update: galeon-2.0.4-1.fc8.2
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
[SECURITY] Fedora 8 Update: kazehakase-0.5.2-1.fc8.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...
[SECURITY] Fedora 8 Update: firefox-2.0.0.12-1.fc8
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-5.fc8
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
[SECURITY] Fedora 8 Update: epiphany-2.20.2-3.fc8
epiphany is a simple GNOME web browser based on the Mozilla rendering engine...
[SECURITY] Fedora 7 Update: kazehakase-0.5.2-1.fc7.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...