CVE-2013-2463

CVE-2013-2463 affects the 2D component (ImagingLib) of Oracle/OpenJDK Java runtimes. Connected advisories describe memory corruption risks in ImagingLib.lookupByteBI and related 2D processing, potentially exploitable by untrusted Java applications/APIs. Affected packages include OpenJDK/OpenJDK-d...

Scientific Linux Security Update : firefox on SL4.x i386/x86_64

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as t...

Scientific Linux Security Update : firefox on SL5.x i386/x86_64

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as t...

Debian: Security Advisory (DSA-2463-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2463

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag...

CVE-2011-2463

CVE-2011-2463 is a cross-site scripting (XSS) vulnerability affecting Adobe ColdFusion 8.0 through 9.0.1, exploitable via vectors involving the cfform tag to inject arbitrary script/HTML into a user’s browser. Public sources describe multiple XSS issues in ColdFusion and confirm that Adobe releas...

CentOS Update for firefox CESA-2009:1162 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Snapshot Viewer for Microsoft Access - ActiveX Control Arbitrary File Download (Metasploit)

$Id: ms08041snapshotviewer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

[Backports-security-announce] Security Update for nsrp

Alexander Reichle-Schmehl uploaded new packages for nspr which fixed the following security problems: CVE-2009-0689 Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and...

Fedora 11 : seamonkey-1.1.19-1.fc11 (2010-7100)

Update to new upstream SeaMonkey version 1.1.19, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.htmlseamonkey1.1.19 CVE-2010-0161 CVE-2010-0163 CVE-2009-3075 CVE-2009-3072 CVE-2009-2463 CVE-2009-3385...

CVE-2010-2463

CVE-2010-2463 affects Jamroom before 4.1.9. The XSS vulnerability occurs in forum.php’s modify action via the post_id parameter due to input sanitization flaws, allowing remote attackers to inject arbitrary HTML/JavaScript into users’ browsers. An exploit example is provided by HTBridge (and rela...

CVE-2010-2463

Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...

CVE-2010-2463

creationtimestamp| type| source ---|---|--- 2010-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34183...

openSUSE Security Update : seamonkey (openSUSE-SU-2010:0273-1)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. Following security issues are fixed: MFSA 2010-07: Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can...

openSUSE Security Update : seamonkey (openSUSE-SU-2010:0273-1)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. Following security issues are fixed: MFSA 2010-07: Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can...

Mozilla Foundation Security Advisory 2010-07

Mozilla Foundation Security Advisory 2010-07 Title: Fixes for potentially exploitable crashes ported to the legacy branch Impact: Critical Announced: March 16, 2010 Reporter: Mozilla developers and community Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 2.0.0.24 SeaMonkey 1.1.19...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-2189)

Mozilla Thunderbird was updated to 2.0.0.14 fixing several security issues and bugs. MFSA 2010-07: Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be utilized by Thunderbird 2 and...

FreeBSD Ports: seamonkey, linux-seamonkey

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu Update for thunderbird vulnerabilities USN-915-1

Ubuntu Update for Linux kernel vulnerabilities USN-915-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9151.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-915-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-915-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...