Updated iceape packages fix security vulnerabilities

Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly...

Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2015-0812

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdoma...

CVE-2015-0812

CVE-2015-0812 affects Mozilla Firefox prior to 37.0, where lightweight theme add-on installations could be initiated over HTTP, allowing a man-in-the-middle to bypass the user-confirmation gate by DNS-spoofing a mozilla.org subdomain. The vulnerability enables MITM-style deployment of themes with...

CVE-2015-0812

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdoma...

openSUSE Security Update : postfixadmin (openSUSE-2012-86)

update to PostfixAdmin 2.3.5 security release - fixes some SQL injections CVE-2012-0811 - fixes some XSS vulnerabilities CVE-2012-0812 - see CHANGELOG.TXT or bnc741455 for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2014-0812

Joyful Note (KENT-WEB) is affected by a cross-site scripting (XSS) vulnerability in Joyful Note version 2.8 and earlier. The issue enables arbitrary script execution in the victim’s browser (via unspecified vectors) when using affected software. Root cause details in connected JVN records indicat...

Gentoo Security Advisory GLSA 201209-18 (postfixadmin)

The remote host is missing updates announced in advisory GLSA 201209-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-0812

Unspecified vulnerability in the Solaris component in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel...

CVE-2011-0812

CVE-2011-0812 affects Oracle Solaris 8, 9, 10, and 11 Express, with an unspecified vulnerability in the Solaris kernel that allows local users to affect availability via unknown vectors. The description consistently notes the issue as kernel-related and local-access in Solaris components, but the...

CentOS Update for thunderbird CESA-2010:0812 centos4 i386

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2010:0812 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for thunderbird CESA-2010:0812 centos4 i386

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2010:0812 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2003-0812

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16378 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms03049netapi.rb 2025-02-06 03:13:37+00:00| seen|...

Microsoft Workstation Service - NetAddAlternateComputerName Overflow (MS03-049) (Metasploit)

$Id: ms03049netapi.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-0812

ISATAP IPv6 Source Address Spoofing vulnerability (CVE-2010-0812) affects Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 SP2. The flaw in the Windows TCP/IP stack checks the inner IPv6 source in tunneled ISATAP packets, enabling spoofing that could bypass IPv4 source-address ...

Microsoft Windows ISATAP组件IPv6地址欺骗漏洞（MS10-029）

BUGTRAQ ID: 39352 CVE ID: CVE-2010-0812 Microsoft Windows是微软发布的非常流行的操作系统。 由于Windows检查隧道传输的ISATAP报文中内部报文IPv6源址的方法，导致Windows IPv6栈存在欺骗漏洞。成功利用这个漏洞的攻击者可以扮演地址绕过边界或主机防火墙。此外，当目标计算机使用攻击者所指定的源IPv6地址回复消息的话，还可能泄露信息。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

Microsoft Workstation Service NetAddAlternateComputerName Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Solaris 8 (x86) : 127722-05

SunOS 5.8x86: kernel patch. Date this patch was last updated by Sun : Apr/11/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

CVE-2009-0812

CVE-2009-0812: BreakPoint Software Hex Workshop versions 4.23, 6.0.1.4603, and other 6.x and earlier are affected by a stack-based buffer overflow triggered by a crafted Intel Hex Code (.hex) file, allowing remote arbitrary code execution. OpenVAS and NVD entries confirm the vulnerability and imp...

CVE-2009-0812

creationtimestamp| type| source ---|---|--- 2009-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8121 2009-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9550...