Oracle Linux 6 : kernel (ELSA-2011-0836)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0836 advisory. - net dccp: handle invalid feature options length Jiri Pirko 703012 703013 CVE-2011-1770 - fs cifs: check for privatedata before trying to put it Jeff...

CVE-2013-0836

CVE-2013-0836 affects Google V8 before 3.14.5.3 as used in Google Chrome before 24.0.1312.52, with a weakness in garbage collection that can cause a remote denial of service (application crash) via crafted JavaScript. The connected documents corroborate the issue across multiple vendors and distr...

CVE-2012-0836

CVE-2012-0836 concerns Joomla! 1.7.x before 1.7.5. The available documents state an unspecified vulnerability that allows attackers to read the error log via unknown vectors. No concrete root-cause, affected subcomponents, or exploit details are provided beyond the version boundary and the error-...

Oracle JD Edwards EnterpriseOne Cross Site Scripting

Advisory Name: Multiple Cross-Site Scripting XSS in Oracle JD Edwards EnterpriseOne Public Advisory Id: CVE-2011-0836 Internal Cybsec Advisory Id: 2011-0402-Multiple XSSs in Oracle JD Edwards EnterpriseOne Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: 04/20/2011 Affected...

CVE-2011-0836

The vulnerability CVE-2011-0836 affects Oracle JD Edwards EnterpriseOne Tools 8.9 GA–8.98.4.1 and OneWorld Tools up to 24.1.3, with an unspecified issue related to Web Runtime SEC that allows remote authenticated users to affect integrity. The Red Hat CVE entry confirms the same affected products...

CVE-2010-0836

CVE-2010-0836 affects Oracle Knowledge Management in Oracle E-Business Suite (11.5.10.2, 12.0.6, 12.1.2). The vulnerability is reachable over HTTP without authentication, with an impact to integrity (partial) and no impact on confidentiality or availability per the CVSS data. The Oracle CPU July ...

SLES9: Security update for Java2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021170 within...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...

SLES9: Security update for Java2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011515 within...

SLES9: Security update for Java2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021170 within...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020865 within the SuSE...

Foxit Reader Authorization Bypass

This module exploits an authorization bypass vulnerability in Foxit Reader build 1120. When an attacker creates a specially crafted pdf file containing an Open/Execute action, arbitrary commands can be executed without confirmation from the victim. This module requires Metasploit:...

Foxit Reader PDF文件处理多个代码执行和绕过授权漏洞

BUGTRAQ ID: 34035 CVECAN ID: CVE-2009-0191,CVE-2009-0836,CVE-2009-0837 Foxit Reader是一款小型的PDF文档查看器和打印程序。 1 Foxit Reader在处理JBIG2符号字典段时存在错误，特制的PDF文件可能导致引用未经初始化的内存。 2 如果PDF文件中定义了Open/Execute a file操作，Foxit Reader可能会未经用户确认便打开或执行PDF文件创建者所定义的文件。 3 如果带有超长文件名参数的PDF文件中定义了Open/Execute a...

Immunity Canvas: FOXITLAUNCHIT

Name| FoxitLaunchit ---|--- CVE| CVE-2009-0836 Exploit Pack| CANVAS Description| FoxitLaunchit Notes| CVE Name: CVE-2009-0836 VENDOR: Foxit Software Notes: VersionsAffected: Foxit Reader 3.0.2009 1301, 3.0 and 2.3 Repeatability: Infinite CVE URL: https://vulners.com/cve/CVE-2009-0836 References:...

CVE-2009-0836

Foxit Reader contains a remote code execution vulnerability (CVE-2009-0836) in which a crafted PDF can trigger an Open/Execute action without user confirmation. Affected products/versions include Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506 (including 1120 and 1301). The issue ari...

Gentoo Security Advisory GLSA 200503-28 (Java)

The remote host is missing updates announced in advisory GLSA 200503-28. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS 3 / 4 / 5 : libxml2 (CESA-2008:0836)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused some applications using the libxml2 library in an...

libxml2 security update

CentOS Errata and Security Advisory CESA-2008:0836-02 Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused som...