Mac OS X : Java for Mac OS X 10.6 Update 16

The remote Mac OS X host has a version of Java for Mac OS X 10.6 that is missing Update 16, which updates the Java version to 1.6.051. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the...

Mac OS X : Java for OS X 2013-004

The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-004 update, which updates the Java version to 1.6.051. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...

CVE-2013-2447

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous...

CVE-2013-2447

CVE-2013-2447 is listed in MiracleLinux advisories as an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting OpenJDK/OpenJDK builds. The affected products are MiracleLinux 3 (java-1.6.0-openjdk) and MiracleLinux 4 (java-1.7.0-openjdk). The description notes remote ...

CVE-2013-2447

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous...

Netsweeper WebAdmin Portal - Multiple Vulnerabilities

Netsweeper WebAdmin Portal - Multiple Vulnerabilities Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection "The later"\ Date: Discovered and reported CSRF and XSS 4/2012 and "The later" 7/2012\ Author: Jacob Holcomb/Gimppy042\ Software Link: Netsweeper Inc. - Netsweep...

Netsweeper WebAdmin Portal - Multiple Vulnerabilities

Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection "The later"\ Date: Discovered and reported CSRF and XSS 4/2012 and "The later" 7/2012\ Author: Jacob Holcomb/Gimppy042\ Software Link: Netsweeper Inc. - Netsweeper Internet Filter www.netsweeper.com\ CVE :...

Slackware: Security Advisory (SSA:2007-134-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

Various bugs were found in NDR parsing, used to decode MS-RPC requests in Samba. A remote attacker could have sent carefully crafted requests causing a heap overflow, which may have led to the ability to execute arbitrary code on the server. CVE-2007-2446 Unescaped user input parameters were bein...

CVE-2012-2447

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

Design/Logic Flaw

Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447...

CVE-2012-2447

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

CVE-2012-2447

CVE-2012-2447 is a CSRF flaw in the Netsweeper WebAdmin Portal, specifically in accountmgr/adminupdate.php. The vulnerability allows an attacker to hijack an administrator’s session and perform actions that create new administrative accounts via the add action. Public materials in the connected R...

Netsweeper Internet Filter WebAdmin Portal multiple vulnerabilities

Overview Netsweeper Internet Filter WebAdmin Portal contains XSS, CSRF and SQLi vulnerabilities. Description Netsweeper Internet Filter's WebAdmin Portal contains the following XSS, CSRF and SQLi vulnerabilities.CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site...

Debian Security Advisory DSA 2447-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 2447-1. OpenVAS Vulnerability Test $Id: deb24471.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2447-1 tiff Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2447-1 : tiff - integer overflow

Alexander Gavrun discovered an integer overflow in the TIFF library in the parsing of the TileSize entry, which could result in the execution of arbitrary code if a malformed image is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

CVE-2011-2447

Adobe Shockwave Player (Mac OS X/Windows) prior to 11.6.3.633 is affected by multiple memory corruption vulnerabilities (CVE-2011-2446, -2447, -2448, -2449) that can allow arbitrary code execution or a denial of service. A remote attacker could exploit these by convincing a user to open a malicio...

Shockwave Player <= 11.6.1.629 Multiple Memory Corruption Vulnerabilities (APSB11-27)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.6.1.629 or earlier. As such, it is potentially affected by multiple memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Adobe Shockwave Player TextXtra.x32 vulnerability

1. Advisory Information Title: Adobe Shockwave Player TextXtra.x32 vulnerability Advisory ID: CORE-2011-0825 Advisory URL: http://www.coresecurity.com/content/adobe-shockwave-textxtra-vulnerability Date published: 2011-11-08 Date of last update: 2011-11-08 Vendors contacted: Adobe Release mode:...

Fedora Update for gnome-python2-extras FEDORA-2011-2447

Check for the Version of gnome-python2-extras OpenVAS Vulnerability Test Fedora Update for gnome-python2-extras FEDORA-2011-2447 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...