RHEL 5 : java-1.6.0-openjdk (RHSA-2012:1222)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1222 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that the Beans...

CentOS Update for java CESA-2012:1221 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for java CESA-2012:1223 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-1553-1: OpenJDK 6 vulnerabilities

It was discovered that the Beans component in OpenJDK 6 did not properly prevent access to restricted classes. A remote attacker could use this to create an untrusted Java applet or application that would bypass Java sandbox restrictions. CVE-2012-1682 It was discovered that functionality in the...

java security update

CentOS Errata and Security Advisory CESA-2012:1223 Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

java security update

CentOS Errata and Security Advisory CESA-2012:1221 Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...

java security update

CentOS Errata and Security Advisory CESA-2012:1222 Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Oracle Java SE JRE Multiple Remote Code Execution Vulnerabilities - Windows

Oracle Java SE JRE is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682...

CVE-2012-1682

CVE-2012-1682 (Beans component) and CVE-2012-4681 relate to OpenJDK/JRE sandbox bypass and remote code execution. Connected advisories (CESA-2012:1221/1222/1223) describe updates for java-1.6.0-openjdk and java-1.7.0-openjdk to fix these issues, noting that the Beans component could bypass sandbo...

CVE-2011-1682

creationtimestamp| type| source ---|---|--- 2012-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18419...

CentOS Update for kdegraphics CESA-2009:1682 centos4 i386

Check for the Version of kdegraphics OpenVAS Vulnerability Test CentOS Update for kdegraphics CESA-2009:1682 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2011-1682

Multiple cross-site request forgery CSRF vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create a list or 2 insert cross-site scripting XSS sequences. NOTE: this issue exists because of an incomplete fix for...

CVE-2011-1682

phpList prior to 2.10.13 is affected by CSRF vulnerabilities that allow an attacker to hijack admin sessions by issuing requests to (1) create a list and (2) insert XSS sequences. The issue stems from an incomplete fix for CVE-2011-0748, and multiple sources confirm these CSRF flaws exist in phpL...

CVE-2007-1682

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16592 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/softartisansgetdrivename.rb 2025-02-06...

CentOS Security Advisory CESA-2009:1682 (kdegraphics)

The remote host is missing updates to kdegraphics announced in advisory CESA-2009:1682. CESA-2009:1682 66626 2 $Id: ovcesa20091682.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1682 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Debian DSA-1682-1 : squirrelmail - insufficient input sanitising

Ivan Markovic discovered that SquirrelMail, a webmail application, did not sufficiently sanitise incoming HTML email, allowing an attacker to perform cross site scripting through sending a malicious HTML email. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...