Unfixed XSS vulnerability at ultimateguide.buffalonews.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting ultimateguide.buffalonews.com, which at the time of submission ranked 13824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. ...

Fedora Update for Django FEDORA-2011-1261

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2011-1261 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: krb5-1.7.1-17.fc13

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

[SECURITY] Fedora 13 Update: webkitgtk-1.2.7-1.fc13

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

Fedora 13 : webkitgtk-1.2.7-1.fc13 (2011-1224)

Fixes the following CVEs: CVE-2010-4492 CVE-2010-4493 CVE-2011-0482 CVE-2010-4199 CVE-2010-4578 CVE-2010-4040 CVE-2011-0778 CVE-2010-2901 CVE-2010-4042 - Fixes a regression caused by earlier fix for CVE-2010-1791. This caused webkitgtk to crash on certain sites with JavaScript. Note that Tenable...

Fedora Update for openoffice.org FEDORA-2011-0837

Check for the Version of openoffice.org OpenVAS Vulnerability Test Fedora Update for openoffice.org FEDORA-2011-0837 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for nbd FEDORA-2011-1097

Check for the Version of nbd OpenVAS Vulnerability Test Fedora Update for nbd FEDORA-2011-1097 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-1631

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2011-1631 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-50.1.8.7.fc13 (2011-1631)

This update fixes the following security issues : S6378709, CVE-2010-4465: AWT event dispatch does not support framework code S6854912, CVE-2010-4465: Security issue with the clipboard access in Applets S6878713, CVE-2010-4469: Verifier heap corruption, relating to backward jsrs S6907662,...

[SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-50.1.8.7.fc13

The OpenJDK runtime environment...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-1231

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2011-1231 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-1231

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-50.1.8.6.fc13 (2011-1231)

Security update : - S4421494, CVE-2010-4476: infinite loop while parsing double literal. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-50.1.8.6.fc13

The OpenJDK runtime environment...

Многочисленные уязвимости в Firebook

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage, Brute Force и Cross-Site Scripting уязвимостях в Firebook. Information Leakage WASC-13: http://site/cgi-bin/firebook/firebook.cgi На странице есть раздел SystemInfo с Full path disclosure и именами txt-файлов БД веб приложения...

Firebook 3.100328 Cross Site Scripting / Leakage

Hello list! I want to warn you about Information Leakage, Brute Force and Cross-Site Scripting vulnerabilities in Firebook. ------------------------- Affected products: ------------------------- Vulnerable are Firebook 3.100328 and previous versions. ---------- Details: ---------- Information...

Fedora Update for postgresql FEDORA-2011-0963

Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2011-0963 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for mod_auth_mysql FEDORA-2011-0114

Check for the Version of modauthmysql OpenVAS Vulnerability Test Fedora Update for modauthmysql FEDORA-2011-0114 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for mod_auth_mysql FEDORA-2011-0114

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mod_auth_mysql-3.0.0-12.fc13 (2011-0114)

This update fixes a security issue in modauthmysql. A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject...