|
292031
|
- |
|
mozilla
|
firefox thunderbird seamonkey
|
Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes…
|
CWE-79
Cross-site Scripting
|
CVE-2012-1956
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292032
|
- |
|
mozilla suse opensuse redhat canonical debian
|
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_software_development_kit enterprise_linux_server en…
|
Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7…
|
CWE-416
Use After Free
|
CVE-2012-1974
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292033
|
- |
|
mozilla suse opensuse redhat canonical debian
|
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_software_development_kit enterprise_linux_server en…
|
Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10…
|
CWE-416
Use After Free
|
CVE-2012-1973
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292034
|
- |
|
mozilla suse opensuse redhat canonical debian
|
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_software_development_kit enterprise_linux_server en…
|
Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x befo…
|
CWE-416
Use After Free
|
CVE-2012-1972
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292035
|
- |
|
mozilla suse opensuse redhat canonical debian
|
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_software_development_kit enterprise_linux_server en…
|
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey b…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-1970
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292036
|
- |
|
gajim
|
gajim
|
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.
|
CWE-94
Code Injection
|
CVE-2012-2085
|
2024-11-21 10:38 |
2012-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292037
|
- |
|
andreas_gohr
|
dokuwiki
|
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
|
CWE-79
Cross-site Scripting
|
CVE-2012-2129
|
2024-11-21 10:38 |
2012-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292038
|
- |
|
andreas_gohr
|
dokuwiki
|
Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. …
|
CWE-352
Origin Validation Error
|
CVE-2012-2128
|
2024-11-21 10:38 |
2012-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292039
|
- |
|
typo3
|
typo3
|
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script…
|
CWE-79
Cross-site Scripting
|
CVE-2012-2112
|
2024-11-21 10:38 |
2012-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292040
|
- |
|
sourcefabric
|
newscoop
|
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to adm…
|
CWE-79
Cross-site Scripting
|
CVE-2012-1935
|
2024-11-21 10:38 |
2012-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|