108 matches found
SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 (MozillaThunderbird)
Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201209171.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2012:0917-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for seamonkey (openSUSE-SU-2012:0935-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2514-1 (iceweasel)
The remote host is missing an update to iceweasel announced via advisory DSA 2514-1. OpenVAS Vulnerability Test $Id: deb25141.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2514-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CentOS Update for firefox CESA-2012:1088 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-1967
CVE-2012-1967 affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x prior to 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x prior to 10.0.6, and SeaMonkey prior to 2.11. Root cause: JavaScript sandbox may run javascript: URLs with insufficient context, allowing remote code execution with user pr...
[SECURITY] [DSA 2514-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2514-1 [email protected] http://www.debian.org/security/ Nico Golde July 17, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
CVE-2012-1967
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper...
Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)
This host is missing a critical security update according to Microsoft Bulletin MS11-063. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-1967
CVE-2011-1967 affects the Windows Client/Server Run-time Subsystem (CSRSS) via the Winsrv.dll component. The root cause is improper permission checks when a lower‑integrity process sends inter‑process device‑event messages to a higher‑integrity CSRSS, enabling local privilege escalation. Affected...
Microsoft Windows CSRSS SrvDeviceEvent Code Execution (MS11-063; CVE-2011-1967)
A code execution vulnerability has been reported in Windows CSRSS. The vulnerability is due to a CSRSS memory assignment issue. An attacker can exploit this vulnerability by convincing an unsuspecting user to open a malicious executable file. Successful exploitation of this vulnerability may enab...
[security bulletin] HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02282377 Version: 2 HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery CSRF NOTICE: The information in...
CVE-2010-1967
CVE-2010-1967 affects HP Insight Software Installer for Windows, prior to version 6.1. It is described as an unspecified local vulnerability that could allow a local user to read or modify data via unknown vectors. HP’s Security Bulletin notes that only v6.1 and newer mitigate the issue, with a l...
CVE-2010-1967
Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors...
Debian DSA-1967-1 : transmission - directory traversal
Dan Rosenberg discovered that Transmission, a lightwight client for the Bittorrent filesharing protocol, performs insufficient sanitising of file names specified in .torrent files. This could lead to the overwrite of local files with the privileges of the user running Transmission if the user is...
Debian Security Advisory DSA 1967-1 (transmission)
The remote host is missing an update to transmission announced via advisory DSA 1967-1. OpenVAS Vulnerability Test $Id: deb19671.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1967-1 transmission Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft In...
CVE-2009-1967
Unspecified vulnerability in the Config Management component in 1 Oracle Database 11.1.0.7 and 2 Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966...
CVE-2009-1967
CVE-2009-1967 affects Oracle Enterprise Manager (Config Management) on Oracle Database 11.1.0.7 and Oracle Enterprise Manager 10.2.0.4. The vulnerability, described as an unspecified issue, allows a remote attacker with a valid session to affect confidentiality and integrity via an unknown vector...