Important: Red Hat Security Advisory: jbossweb security update

Updated jbossweb packages that fix multiple security issues are now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS ba...

tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

[SECURITY] [DSA 2399-2] php5 regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2399-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 31, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2399-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2399-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 31, 2012 http://www.debian.org/security/faq -...

Oracle Warehouse Builder WB_OLAP_AW_REMOVE_SOLVE_ID SQL Injection (CVE-2011-0799)

An SQL injection vulnerability has been reported in Oracle Warehouse Builder, a component of Oracle Database...

Oracle Warehouse Builder WB_RT_AUDIT_SHADOW_TABLE Multiple SQL Injections (CVE-2011-0799)

Multiple SQL injection vulnerabilities have been reported in Oracle Warehouse Builder OWB, a component of Oracle Database...

Microsoft Windows Active Directory LDAPS Authentication Bypass (MS11-086; CVE-2011-2014)

An elevation of privilege vulnerability has been reported in Microsoft Windows Active Directory...

CVE-2011-2140

creationtimestamp| type| source ---|---|--- 2012-01-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18437 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18479 2018-05-29 15:50:33+00:00| seen|...

RHEL 6 : ruby (RHSA-2012:0069)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0069 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. A...

RHEL 4 : php (RHSA-2012:0071)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0071 advisory. - php: buffer over-read in Exif extension CVE-2011-0708 - php: Crash by converting serial day numbers SDN into Julian calendar CVE-2011-1466...

Adobe Flash Player Code Execution

Abysssec Public Exploit CVE-2011-2140 This exploit tested on Adobe Flash Player = 10.3.181.34 XP sp3 twitter : @abysssec contact : info at abysssec.com http://www.abysssec.com/blog/2012/01/31/exploiting-cve-2011-2140-another-flash-player-vulnerability import sys def sprayheap: spray = ''' functio...

CentOS 6 : t1lib (CESA-2012:0062)

Updated t1lib packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

VMSA-2012-0001 : VMware ESXi and ESX updates to third-party library and ESX Service Console

a. ESX third-party update for Service Console kernel The ESX Service Console Operating System COS kernel is updated to kernel-2.6.18-274.3.1.el5 to fix multiple security issues in the COS kernel. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2011-0726,...

Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution

Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution Abysssec Public Exploit CVE-2011-2140 This exploit tested on Adobe Flash Player = 10.3.181.34 XP sp3 twitter : @abysssec contact : info at abysssec.com...

CentOS 4 / 5 : ruby (CESA-2012:0070)

Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 6 : openssl (CESA-2012:0059)

Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

php security update

CentOS Errata and Security Advisory CESA-2012:0071 Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2012:0058 Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

[SECURITY] [DSA 2398-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2398-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2012 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...