IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-1908-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-1500, CVE-2013-2454, CVE-2013-2458 A vulnerability was discovered in the OpenJDK Javadoc related to...

Debian DSA-2722-1 : openjdk-7 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

[SECURITY] [DSA 2722-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 15, 2013 http://www.debian.org/security/faq -...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-2449

CVE-2013-2449 affects the Java Runtime Environment (JRE) Libraries component in Oracle Java SE 7 Update 21 and earlier, and in OpenJDK 7. The MiracleLinux AXSA advisory confirms the vulnerability as “Unspecified” with remote confidentiality impact via Libraries. The connected IBM advisories corro...

Nmap NSE 6.01: pop3-capabilities

Retrieves POP3 email server capabilities. POP3 capabilities are defined in RFC 2449. The CAPA command allows a client to ask a server what commands it supports and possibly any site-specific policy. Besides the list of supported commands, the IMPLEMENTATION string giving the server version may be...

Scientific Linux Security Update : tomcat on SL5.x i386/x86_64

Some JSPs within the 'examples' web application did not escape user provided data. If the JSP examples were accessible, this flaw could allow a remote attacker to perform cross-site scripting attacks CVE-2007-2449. Note: it is recommended the 'examples' web application not be installed on a...

VMSA-2012-0009 : ESXi and ESX patches address critical security issues (uncredentialed check)

The remote VMware ESX/ESXi host is affected by the following security vulnerabilities : - ESX NFS traffic parsing vulnerability: Due to a flaw in the handling of NFS traffic, it is possible to overwrite memory. This vulnerability may allow a user with access to the network to execute code on the...

VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0009 Synopsis: VMware Workstation, Player, ESXi and ESX patches address critical security issues Issue date: 2012-05-03 Updated on:...

Debian Security Advisory DSA 2449-1 (sqlalchemy)

The remote host is missing an update to sqlalchemy announced via advisory DSA 2449-1. OpenVAS Vulnerability Test $Id: deb24491.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2449-1 sqlalchemy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2449-1 : sqlalchemy - missing input sanitization

It was discovered that SQLAlchemy, a SQL toolkit and object relational mapper for Python, is not sanitizing input passed to the limit/offset keywords to select as well as the value passed to select.limit/offset. This allows an attacker to perform SQL injection attacks against applications using...

Adobe Shockwave Player 11.6.3.633之前版本TextXtra模块拒绝服务漏洞(CVE-2011-2449)

CVE ID: CVE-2011-2449 Adobe Shockwave Player是播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player 11.6.3.633之前版本在TextXtra模块的实现上存在安全漏洞，可使攻击者执行任意代码或造成拒绝服务。 Adobe Shockwave Player 11.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-27）以及相应补丁: APSB11-27：Security update available for Adobe...

CVE-2011-2449

The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2011-2449

The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2011-2449

CVE-2011-2449 affects Adobe Shockwave Player's TextXtra module, with versions before 11.6.3.633 vulnerable to memory corruption that can enable arbitrary code execution or cause a denial of service. The vulnerability is present across affected builds (e.g., Windows and Mac OS X) and is tied to th...

Shockwave Player <= 11.6.1.629 Multiple Memory Corruption Vulnerabilities (APSB11-27)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.6.1.629 or earlier. As such, it is potentially affected by multiple memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Nmap NSE net: pop3-capabilities

Retrieves POP3 email server capabilities. POP3 capabilities are defined in RFC 2449. The CAPA command allows a client to ask a server what commands it supports and possibly any site-specific policy. Besides the list of supported commands, the IMPLEMENTATION string giving the server version may be...

Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004

The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...