Oracle Java SE Multiple Vulnerabilities - Linux

Sun Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sun:jre"; ifdescription...

CVE-2010-0848

CVE-2010-0848 is referenced in connected records as an OpenJDK/OpenJRE issue: a missing input validation flaw in the JRE could cause an untrusted applet or application to crash. Affected context in the provided OpenVAS/Nessus entries ties this CVE to Java 6/OpenJDK components, notably in SL/Fedor...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Important: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)

The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.226. Such versions are potentially affected by security issues in the following components : - ImageIO - Java 2D - JRE - Java Web Start, Java Plug-in -...

Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati)

Check for the Version of x11-driver-video-ati OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-ati MDVA-2010:084 x11-driver-video-ati Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

openSUSE Security Update : gtk2 (gtk2-583)

A SUSE specific patch to GTK2 accidentally added a relative search path for gtk modules therefore allowed local attackers have gtk programs load modules from untrusted places CVE-2009-0848. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : gtk2 (gtk2-583)

A SUSE specific patch to GTK2 accidentally added a relative search path for gtk modules therefore allowed local attackers have gtk programs load modules from untrusted places CVE-2009-0848. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

CVE-2009-0848

The CVE-2009-0848 issue concerns openSUSE/OpenSUSE GTK2 (gtk2) in versions affected by the SUSE patch gtk2-583. The root cause is a misconfigured relative search path that allowed loading GTK modules from untrusted locations, enabling local users to execute arbitrary code via Trojan horse GTK mod...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...

CVE-2008-0848

Crafty Syntax Live Help (CSLH) is affected by CVE-2008-0848 due to an XSS vulnerability in lostsheep.php present in versions before 2.14.16. The entry states remote attackers can inject arbitrary script or HTML via unspecified vectors. The notes mention possible inaccuracies in the researcher’s v...

CVE-2007-0848

The CVE-2007-0848 entry concerns Maian Recipe 1.0 and a PHP remote file inclusion in the file classes/class_mail.inc.php. The underlying issue allows an attacker to supply a URL via the path_to_folder parameter to cause remote PHP code execution. Exploitation details are not provided in the avail...

CVE-2006-0394

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0848. Reason: This candidate is a duplicate of CVE-2006-0848. Notes: All CVE users should reference CVE-2006-0848 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-0394

CVE-2006-0394 is a duplicate of CVE-2006-0848; the connected records confirm the issue is Safari on macOS where the “Open 'safe' files after downloading” feature can be abused to execute arbitrary commands by tricking a user into opening a ZIP containing a __MACOSX metadata file that invokes Term...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...

CVE-2006-0848

CVE-2006-0848 describes a vulnerability in Safari on macOS where the Open Safe files after downloading option can be abused to execute arbitrary commands. An attacker can convince a user to download a __MACOSX folder containing a resource fork that triggers Terminal to interpret a script vi...

CVE-2005-0848

CVE-2005-0848 affects multiple FUN Labs games (4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, US Most Wanted). The issue: remote attackers can cause a denial of service by sending an empty UDP packet to the game server; the serve...

CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after 1 "%00 null byte in .doc filenames or 2 "%0a" carriage return in .rtf filenames...

CVE-2004-0848

CVE-2004-0848 corresponds to a buffer overflow in Microsoft Office XP that can allow remote code execution via specially crafted HTML links referencing URL file locations. Connected advisories detail that the overflow occurs in the Office process handling URL file references, enabling arbitrary c...