112 matches found
CVE-2011-1190
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
CVE-2011-1190
CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...
Fedora Update for mediawiki FEDORA-2010-6335
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Java for Mac OS X 10.5 Update 2
The remote host is missing Java for Mac OS X 10.5 Update 2. One or more of the following components are affected: Java OpenVAS Vulnerability Test Java for Mac OS X 10.5 Update 2 LSS-NVT-2010-029 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribut...
Java for Mac OS X 10.5 Update 2
The remote host is missing Java for Mac OS X 10.5 Update 2. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
openSUSE Security Update : mediawiki (openSUSE-SU-2010:0154-1)
MediaWiki was prone to a CSS validation flaw and data leakage vulnerability CVE-2010-1189, CVE-2010-1190. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mediawiki-2356. The text description o...
CVE-2010-1190
thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as imgauth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations...
CVE-2010-1190
CVE-2010-1190 affects MediaWiki versions before 1.15.2 where thumb.php, used with access-restriction mechanisms like img_auth.php, fails to enforce permissions when serving scaled images. This leads to potential data leakage of private images by manipulating image requests. The issue is documente...
MediaWiki 1.15.0 - 1.15.1 'thumb.php' Security Bypass Vulnerability
MediaWiki is prone to a security bypass vulnerability because it fails to properly restrict access to restricted content. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
SLES10: Security update for Sun Java
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...
SLES10: Security update for IBM Java 1.4.2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-ibm java-142-ibm-devel java-142-ibm-jdbc java-142-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 10 patch...
SLES10: Security update for Sun Java
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...
SLES9: Security update for IBM Java 5 and JRE
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-SDK IBMJava5-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
SLES9: Security update for IBM Java 2 JRE and SDK
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-SDK IBMJava2-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
SLES9: Security update for IBM Java 5 and JRE
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-SDK IBMJava5-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
SLES9: Security update for Java2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5023078 within...
SuSE9 Security Update : IBM Java 2 JRE and SDK (YOU Patch Number 12142)
IBM Java 1.4.2 was updated to SR10 to fix various security issues : - A buffer overflow vulnerability in Java Web Start may allow an untrusted Java Web Start application that is downloaded from a website to elevate its privileges. For example, an untrusted Java Web Start application may grant...
VMSA-2008-0010 : Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
ESX patches and updates for VirtualCenter fix the following application vulnerabilities. a. Tomcat Server Security Update The ESX patches and the updates for VirtualCenter update the Tomcat Server package to version 5.5.26, which addresses multiple security issues that existed in earlier releases...
CVE-2009-1190
CVE-2009-1190 is an algorithmic complexity vulnerability in java.util.regex.Pattern.compile. The issue arises when the JVM compiles long regex patterns containing multiple optional groups, leading to CPU exhaustion and a potential denial of service. Affected products listed in the description inc...
SuSE Update for Sun Java SUSE-SA:2008:018
Check for the Version of Sun Java OpenVAS Vulnerability Test $Id: gbsuse2008018.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for Sun Java SUSE-SA:2008:018 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...