339 matches found
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This iss...
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption
source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script...
Microsoft Internet Explorer DHTML Object Race Condition Memory Corruption Vulnerability
Description A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script objects, a race condition may lead to the...
CVE-2002-1647
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2005-0587
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...
CVE-2005-0585
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...
CVE-2004-1314
CVE-2004-1314 corresponds to a Safari 1.x vulnerability where an attacker can spoof arbitrary websites by injecting content from one window into a target window that resides in another domain, demonstrated via a pop-up window on a trusted site. This “window injection” issue is distinct from CVE-2...
CVE-2004-1160
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window...
CVE-2004-1157
CVE-2004-1157 affects Opera 7.x up to 7.54 (and possibly other versions). The issue allows remote spoofing of arbitrary websites by injecting content from one window into a target window that has a known name but resides in a different domain (a window-injection vulnerability). The impact is cont...
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass source: https://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handl...
phpWebSite SQL Injection & DoS & XSS Vulnerabilities
phpWebSite SQL Injection & DoS & XSS Vulnerabilities ------ PRODUCT: phpWebSite VENDOR: Appalachian State University VULNERABLE VERSIONS: - 0.9.x - 0.8.x - 0.7.x - And older versions. NO VULNERABLE VERSIONS - ? --------------------- Description: phpWebSite provides a complete web site content...
CVE-2003-0459
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites...
CVE-2002-2181
SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name...
CVE-2002-0058
Vulnerability in Java Runtime Environment JRE allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in 1 Netscape 6.0 through 6.1 and 4.79 and earlier, 2 Microsoft VM...
Security Bulletin MS01-010
---------------------------------------------------------------------- Title: Patch Available for "Windows Media Player Skins File Download" Vulnerability Date: February 14, 2001 Software: Windows Media Player 7 Impact: Run arbitrary code Bulletin: MS01-010 Microsoft encourages customers to...
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local...
MS09-053: Vulnerabilities in FTP Service for Internet Information Services could allow remote code execution
None None...
MS04-041: A vulnerability in WordPad could allow code execution
None None...
Windows Azure Pack: Web Sites V2
Detectoid checks for the existence of Windows Azure Pack: Web Sites V2 or Windows Azure Pack Web Sites V2U1 or Windows Azure Pack Web Sites V2U2 or Windows Azure Pack Web Sites V2U3 or V2U4 or V2U6 13,18 or V2U7 or V2U9 or V2U11 or V2U12...