Searching preview software vulnerabilities

Preview version of Timbuktu for Mac OS X allows

Preferences | Timbuktu | without | logging | Preview | version | System | modify | allows | local | users | menu | via | Mac |

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu.


Cross-site scripting in PostCalendar 3.02 allow

PostCalendar | Cross-site | scripting |

Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.


The file preview functionality in Sketch 0.6.12

functionality | preview | Sketch | file |

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.


Cross-site scripting (XSS) vulnerability in pri

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.


The Windows Media Player control in Microsoft W

Microsoft | control | Windows | Player | Media |

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.


Mozilla Firefox before the Preview Release, Moz

Release | Preview | Mozilla | Firefox | before |

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.


Directory traversal vulnerability in btdownload

vulnerability | btdownloadphp | arbitrary | attackers | traversal | Directory | download | preview | Torrent | allows | remote | files | Blog | via |

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.


Cross-site scripting (XSS) vulnerability in the

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability.


The preview_review function in the Reviews modu

preview_review | information | sensitive | attackers | generates | parameter | function | PHP-Nuke | Reviews | Windows | invalid | message | systems | running | obtain | remote | allows | module | error | which | date | via |

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.


Multiple SQL injection vulnerabilities in MyBul

vulnerabilities | MyBulletinBoard | injection | Multiple | SQL |

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.


The image gallery (imagegallery) component in E

gallery | image |

The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.


The (1) rdiff and (2) preview scripts in TWiki


The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.


Stack-based buffer overflow in Preview in Apple

Stack-based | overflow | Preview | buffer | Apple | Mac |

Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy.


Directory traversal vulnerability in cgi-bin/pr

cgi-bin/preview_emailcgi | vulnerability | Barracuda | Directory | traversal | Firewall | Spam |

Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.


Buffer overflow in the preview_create function

preview_create | attackers | function | overflow | Eremove | service | denial | remote | allows | guicpp | Buffer | Murray | Mitch | cause |

Buffer overflow in the preview_create function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a large email attachment.


Cross-site scripting (XSS) vulnerability in the

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.


Cross-site scripting (XSS) vulnerability in ann

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter.


SQL injection vulnerability in lib/entry_reply_

lib/entry_reply_entryphp | vulnerability | Community | injection | Invision | Blog | Mod | SQL |

SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.


The "Feed Preview" feature in Mozilla Firefox 2

Preview" | Mozilla | Firefox | feature | before | "Feed |

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits.


Integer underflow in Preview in PDFKit on Apple

underflow | Preview | Integer | PDFKit | Apple | Mac |

Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file.


Software vulnerabilities results 1 to 20 of 49     
Page: 123►