java security update

CentOS Errata and Security Advisory CESA-2013:0246 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

Fedora Update for java-1.6.0-openjdk FEDORA-2013-1898

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Oracle Java SE Multiple Vulnerabilities -01 Feb 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln01feb13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -01 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013...

Oracle Java SE JMX子组件远程JRE漏洞(CVE-2013-0450)

BUGTRAQ ID: 57703 CVECAN ID: CVE-2013-0450 Oracle Java Runtime Environment JRE是一款为JAVA应用程序提供可靠运行环境的解决方案。 Java Runtime Environment组件的JMX子组件存在安全漏洞，未认证的远程攻击者可利用此漏洞影响其机密性、完整性、可用性。 0 Oracle Sun JRE = JavaFX 2.2.4 Oracle Sun JRE = 7 Update 11 厂商补丁： Oracle ------...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-0450

CVE-2013-0450 affects Oracle JRE 7 up to Update 11, Oracle JDK 6/7 up to Update 38, OpenJDK 6/7. Root cause per sources: improper access control context checks in JMX RequiredModelMBean. Impact: remote attackers can affect confidentiality, integrity, and availability via JMX-related vectors. Publ...

Scientific Linux Security Update : tomcat on SL5.x i386/x86_64

Some JSPs within the 'examples' web application did not escape user provided data. If the JSP examples were accessible, this flaw could allow a remote attacker to perform cross-site scripting attacks CVE-2007-2449. Note: it is recommended the 'examples' web application not be installed on a...

Mandriva Update for mozilla MDVSA-2012:013 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:013 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mozilla Products 'Firefox Recovery Key.html' Information Disclosure Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/seamonkey and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsrecoverykeyinfodiscvulnmacosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products 'Firefox Recovery Key.html' Information Disclosure...

Mandriva Update for mozilla MDVSA-2012:013 (mozilla)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mozilla Foundation Security Advisory 2012-09

Mozilla Foundation Security Advisory 2012-09 Title: Firefox Recovery Key.html is saved with unsafe permission Impact: Moderate Announced: January 31, 2012 Reporter: magicant starmen Products: Firefox, SeaMonkey Fixed in: Firefox 10.0 SeaMonkey 2.7 Description magicant starmen reported that if a...

CVE-2012-0450

Mozilla Firefox (Linux/macOS) and SeaMonkey

FreeBSD Ports: opera, opera-devel, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0450

Opera before 11.01 on Windows is affected by CVE-2011-0450 due to the downloads manager failing to correctly determine the pathname of the filesystem-viewing application. This can allow a user-assisted remote attacker to execute arbitrary code via a crafted web site that hosts an executable file....

CVE-2010-0450

CVE-2010-0450 affects HP SOA Registry Foundation 6.63 and 6.64. The vulnerability is described as an unspecified issue that allows remote authenticated users to gain privileges via unknown vectors. Red Hat/HP security bulletins list this as a privilege-escalation flaw with a base CVSS v2 score of...

[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02037890 Version: 1 HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting XSS, Privilege Escalation NOTICE: The information in this...

RHEL 3 / 4 : tomcat in Satellite Server (RHSA-2007:1069)

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. ...

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

Apache Tomcat is an implementation of the Java Servlet and JavaServer pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

SLES9: Security update for jakarta-tomcat

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jakarta-tomcat For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012618 within...