Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency bsc976340. - CVE-2016-0687: Better byte behavior bsc976340. - CVE-2016-0695: Make DSA more fair bsc976340. - CVE-2016-3425: Better buffering o...

DLA-451-1 openjdk-7 - security update

Bulletin has no description...

Concrete CMS: ProBlog 2.6.6 CSRF Exploit

Report Because the ProBlogs plugin did not validate the anti-csrf token on a POST request. A victim who is logged in could be fooled into clicking a malicious form styled to look like a link, image, etc which would create a page in their C5 website. Because the ProBlogs plugin does not validate t...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2016-0675)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0675 advisory. 1:1.7.0.101-2.6.6.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.101-2.6.6.1 - added Patch666 fontpath.patch to fix tck regressions - Resolves:...

PT-2015-5706 · Symfony · Symfony

Name of the Vulnerable Software and Affected Versions: Symfony HttpFoundation component versions 2.0.X through 2.6.X Description: The issue affects the SymfonyComponentHttpFoundationRequest class, which has a mechanism to ensure it does not trust HTTP header values coming from a "non-trusted"...

Wordpress 2.6.6 /wysija_newsletters/trunk/helpers/back.php 任意文件创建漏洞

/wp-content/plugins/wysija-newsletters/helpers/back.phpfunction verifycapability if isset $REQUEST'page' && substr $REQUEST'page' ,0 ,7 == 'wysija' switch $REQUEST'page' case 'wysijacampaigns': $roleneeded = 'wysijanewsletters'; break; case 'wysijasubscribers': $roleneeded = 'wysijasubscribers';...

DLA-25-1 python2.6 - security update

Bulletin has no description...

Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)

Martin Holst Swende discovered a flaw in the way chunked requests are handled in ModSecurity, an Apache module whose purpose is to tighten the Web application security. A remote attacker could use this flaw to bypass intended modsecurity restrictions by using chunked transfer coding with a...

python security, bug fix, and enhancement update

2.6.6-51 - Fixed memory leak in ssl.getpeeraltnames Resolves: rhbz1002983 2.6.6-50 - Added fix for CVE-2013-4238 Resolves: rhbz998784 2.6.6-49 - Fix shebangs in several files in python-tools subpackage Resolves: rhbz521898 2.6.6-48 - Fix sqlite3.Cursor.lastrowid under a Turkish locale. Resolves:...

k2, 2.6.6, Open Folder Permissions

k2, Open folder permissions developer notice http:/getk2.org/blog/1432-k2-v267-released-akismet-integrated-new-acl-option-improved-php-54-support...

CVE-2012-0790

CVE-2012-0790 describes a cross-site scripting (XSS) vulnerability in smokeping_cgi of Smokeping. The flaw allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7. The root cause is unsanitized input h...

pidgin security update

2.6.6-10.el4 - Add patch for CVE-2011-4603 RH bug 766449. 2.6.6-9.el4 - Add patch for CVE-2011-4602 RH bug 766449. 2.6.6-8.el4 - Add patch for CVE-2011-4601 RH bug 766449...

FCK each version of a breakout-vulnerability warning-the black bar safety net

Don't know who the copyright- FCKeditor v2.43 版本 FCKeditor/editor/filemanager/browser/default/connectors/php/config.php FCKeditor V2. 6. 6 version fckeditor/editor/filemanager/connectors/asp/config.php View Editor Version FCKeditor/whatsnew.html...

RHEL 6 : python (RHSA-2011:0554)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0554 advisory. Python is an interpreted, interactive, object-oriented programming language. A flaw was found in the Python urllib and urllib2 libraries whe...

Fwd: 2.6.6 <= phpMyFAQ <= 2.6.8 XSS

Hi, My name is Yam Mesicka, I'm from Israel and this is my first big disclosure so help needed is here :- I found XSS on phpMyFAQ system, versions 2.6.6 to 2.6.8. Dork: intitle:"Powered By phpMyFAQ 2.6.8" XSS: site-location/index.php/"scriptalert"XSS"/script Vul: 2.6.6 = phpMyFAQ = 2.6.8 The...

Debian Security Advisory DSA 2038-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 2038-1. OpenVAS Vulnerability Test $Id: deb20381.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2038-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:085)

Security vulnerabilities has been identified and fixed in pidgin : The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrate...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)

Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly CVE-2010-0277. In a user in a multi-user chat room has a nickname containi...

pidgin: Smiley Denial of Service

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service CPU consumption and application hang by sending many smileys in a 1 IM or 2 chat...

PT-2009-1087 · Gnu · Gnutls

Name of the Vulnerable Software and Affected Versions: GnuTLS versions prior to 2.6.6 Description: The issue concerns multiple vulnerabilities in the GnuTLS package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected...