SuSE 11.2 Security Update: MozillaThunderbird (2010-03-05)

Mozilla Thunderbird was upgraded to version 3.0.3, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based product...

RedHat Update for cups RHSA-2010:0129-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2010:0129-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

openSUSE Security Update : seamonkey (seamonkey-2013)

Mozilla SeaMonkey was upgraded to version 2.0.3, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

OTRS Multiple SQLi Vulnerabilities (OSA-2010-01)

Open Ticket Request System OTRS is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Drupal's <= v6.x-1.0 Realname User Reference Widget contributed module

Exploit for unknown platform in category web applications ====================================================================== Drupal's Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily...

The recent discovery of a windows overflow 0day demo-vulnerability warning-the black bar safety net

by Langouster Windows overflow vulnerability 1. This vulnerability for Windows somewhere on the design defect cause, should be early Windows legacy issues, the details will not say 2. Affected by this vulnerability the code quite a bit, have Microsoft The there are also third party; The...

Unfixed XSS vulnerability at brasil.dineromail.com

Security researcher Daniel Godoy, has submitted on 02/01/2010 a cross-site-scripting XSS vulnerability affecting brasil.dineromail.com, which at the time of submission ranked 40792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It ...

Xerox Workcenter 4150 - Remote Buffer Overflow (PoC)

Xerox Workcenter 4150 - Remote Buffer Overflow PoC Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3...

CVE-2010-0799

creationtimestamp| type| source ---|---|--- 2010-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11290...

CVE-2010-0632

creationtimestamp| type| source ---|---|--- 2010-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11294...

HP OpenView Storage Data Protector Cell Manager buffer overflow

Added: 01/29/2010 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in HP OpenView Storage Data Protector allows remote attackers to execute arbitrary commands by sending a specially crafted request to the Cell Manager service. Resolution...

Unfixed XSS vulnerability at www.degraeve.com

Security researcher Christian Sciberras, has submitted on 28/01/2010 a cross-site-scripting XSS vulnerability affecting www.degraeve.com, which at the time of submission ranked 23703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. I...

MySQL yaSSL SSL Hello Message Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.7.5 and earlier implementation bundled with MySQL 'MySQL yaSSL SSL Hello Message Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in the yaSSL 1.7.5 and earlier implementation bundled with MySQL 'MC' ,...

CVE-2010-0462

creationtimestamp| type| source ---|---|--- 2010-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33572...

CVE-2010-0552

creationtimestamp| type| source ---|---|--- 2010-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33965...

Red Hat Linux Kernel路由实现多个远程拒绝服务漏洞

BUGTRAQ ID: 37875 CVE ID: CVE-2009-4272 Linux Kernel是开放源码操作系统Linux所使用的内核。 Red Hat版本的Linux Kernel的路由实现中存在两个拒绝服务漏洞。如果攻击者能够通过特制报文导致在路由哈希表中出现大量冲突以触发紧急路由flush，就会触发死锁；其次，如果禁用了内核路由缓存，在路由查询后会留下未初始化的指针，导致内核忙碌。 RedHat Linux 5.x 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2010:0046-01）以及相应补丁:...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : httpd (SSA:2010-024-01)

New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-024-01. The text itself is...

Unfixed XSS vulnerability at www.pauta.com.br

Security researcher Fzero, has submitted on 22/01/2010 a cross-site-scripting XSS vulnerability affecting www.pauta.com.br, which at the time of submission ranked 494116 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currentl...

Adobe Illustrator EPS File DSC Comment Buffer Overflow

Added: 01/20/2010 CVE: CVE-2009-4195 BID: 37192 OSVDB: 60632 Background Adobe Illustrator software is a comprehensive vector graphics environment for creative professionals that is used for both drawing and typographical work. Illustrator supports several vector file formats including AI, CDR, PD...