windows_xp Archives - CVE Vulnerability

CVE-2008-4609

Sun, 26 Feb 2023 09:10:37 +0000

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

The post CVE-2008-4609 appeared first on CVE Vulnerability.

CVE-2007-4671

Sun, 26 Feb 2023 09:07:20 +0000

Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to “alter or access” HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.

The post CVE-2007-4671 appeared first on CVE Vulnerability.

CVE-2007-3845

Sun, 26 Feb 2023 09:06:55 +0000

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching “a file handling program based on the file extension at the end of the URI,” a variant of CVE-2007-4041. NOTE: the vendor states that “it is still possible to launch a filetype handler based on extension rather than the registered protocol handler.”

The post CVE-2007-3845 appeared first on CVE Vulnerability.

CVE-2007-3756

Sun, 26 Feb 2023 09:06:53 +0000

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the parent window is in a different domain.

The post CVE-2007-3756 appeared first on CVE Vulnerability.

CVE-2007-3758

Sun, 26 Feb 2023 09:06:53 +0000

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window properties for web pages that are in a different domain, which can be leveraged to conduct cross-site scripting (XSS) attacks.

The post CVE-2007-3758 appeared first on CVE Vulnerability.

CVE-2007-3760

Sun, 26 Feb 2023 09:06:53 +0000

Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags.

The post CVE-2007-3760 appeared first on CVE Vulnerability.

CVE-2007-2400

Sun, 26 Feb 2023 09:06:17 +0000

Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.

The post CVE-2007-2400 appeared first on CVE Vulnerability.

CVE-2020-7485

Sun, 26 Feb 2023 06:43:04 +0000

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

The post CVE-2020-7485 appeared first on CVE Vulnerability.

CVE-2019-5620

Sun, 26 Feb 2023 06:33:43 +0000

ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function.

The post CVE-2019-5620 appeared first on CVE Vulnerability.