CVE-2012-1724

CVE-2012-1724 is described as an unspecified vulnerability in the Oracle Java SE JRE component, related to JAXP, that could allow a remote attacker to affect availability. The affected reference points to Oracle Java SE 7u4 and earlier and 6u32 and earlier. Connected advisories (MiracleLinux AXSA...

RedHat Update for java-1.6.0-openjdk RHSA-2012:0730-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2012:0730-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RHEL 6 : java-1.6.0-sun (RHSA-2012:0734)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0734 advisory. The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes severa...

CVE-2011-1724

CVE-2011-1724 describes an unspecified vulnerability in HP Virtual Server Environment for Windows prior to version 6.3 that could allow remote authenticated users to escalate privileges. The NVD entry lists a CVSS v2 base score of 6.0 (Network vector, single authentication, partial confidentialit...

[security bulletin] HPSBMA02665 SSRT100185 rev.1 - HP Virtual Server Environment for Windows, Remote Privilege Elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02749050 Version: 1 HPSBMA02665 SSRT100185 rev.1 - HP Virtual Server Environment for Windows, Remote Privilege Elevation NOTICE: The information in this Security Bulletin should be acted upon as...

Fedora 13 : zikula-1.2.3-1.fc13 (2010-8501)

Upstream pushed this release to fix two security issues one XSS, and one CSRF Upstream also removed a non-free JavaScript library that we previously had to strip. http://community.zikula.org/module-News-display-sid-3012.htm Note that Tenable Network Security has extracted the preceding descriptio...

Tumbleweed SecureTransport FileTransfer - 'vcst_eu.dll' ActiveX Control Buffer Overflow (Metasploit)

$Id: tumbleweedfiletransfer.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora Update for zikula FEDORA-2010-8501

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for zikula FEDORA-2010-8464

Check for the Version of zikula OpenVAS Vulnerability Test Fedora Update for zikula FEDORA-2010-8464 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2010-1724

CVE-2010-1724 affects Zikula Application Framework (v1.2.2 and possibly earlier). The vulnerability is XSS in the index.php handling of func and lang parameters via ZLanguage.php, enabling remote injection of arbitrary script/HTML. OpenVAS entries corroborate multiple XSS/CSRF issues for Zikula. ...

Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Tumbleweed...

Apple Safari DoS or XSS Vulnerability - July09

This host is installed with Apple Safari Web Browser and is prone to Denial of Service or Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafaridosnxssvulnjul09.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari DoS or XSS Vulnerability - July09 Authors: Sharath S...

CVE-2009-1724

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

CVE-2009-1724

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

CVE-2009-1724

Summary: CVE-2009-1724 is a cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari prior to 4.0.2 (on iPhone OS before 3.1 and 3.1.1 for iPod touch, among others). Root cause: arbitrary web script/HTML can be injected via vectors related to parent and top objects. Impact (as stat...

Safari < 4.0.2 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.2. Such versions are potentially affected by two issues : - A vulnerability in WebKit's handling of parent and top objects may allow for cross-site scripting attacks. CVE-2009-1724 - A memory corruption issue in WebKit...

Mac OS X : Apple Safari < 4.0.2

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.2 As such, it is potentially affected by two issues : - A vulnerability in WebKit's handling of parent and top objects may allow for cross-site scripting attacks. CVE-2009-1724 - A memory corruption issue in...

CVE-2009-1724

creationtimestamp| type| source ---|---|--- 2009-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33047...

Debian DSA-1724-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0500 It was discovered that the information stored in the log tables was not properly sanitized, which could...

CVE-2008-1724

CVE-2008-1724 affects Tumbleweed SecureTransport Server with the vcst_en.dll 1.0.0.5 ActiveX control (and vcst_eu.dll TransferFile ActiveX in Metasploit references) prior to 4.6.1 Hotfix 20. It describes a stack-based buffer overflow in IActiveXTransfer.FileTransfer that can be triggered by a lon...