[SECURITY] [DSA 2264-1] linux-2.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2264-1 [email protected] http://www.debian.org/security/ dann frazier June 18, 2011 http://www.debian.org/security/faq -...

DSA-2264-1 linux-2.6 - several issues

Bulletin has no description...

JDK unspecified vulnerability in Java Web Start component

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2011-0786

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2011-0868

CVE-2011-0868 affects Oracle Java SE 6, specifically the JRE component up to Update 25 and earlier. The vulnerability is described as an unspecified issue in the 2D subsystem that could impact confidentiality via unknown attack vectors, with no explicit exploit details provided in the sources. Th...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-1111-1)

Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...

Asterisk 1.8.4 SIP Username Enumeration

Asterisk, sip response permit username identification through use REGISTER Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 25/05/2011 Criticality level: Low Impact: Information leak Software: Asterisk 1.8.4 I try it to an...

[SECURITY] [DSA 2240-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at waphost.no

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting waphost.no, which at the time of submission ranked 18151765 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

DSA-2240-1 linux-2.6 - several issues

Bulletin has no description...

Ubuntu Update for linux-source-2.6.15 USN-1111-1

Ubuntu Update for Linux kernel vulnerabilities USN-1111-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11111.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-source-2.6.15 USN-1111-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

USN-1111-1: Linux kernel vulnerabilities

Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...

Oracle Java Applet2ClassLoader Vulnerability

Added: 05/05/2011 CVE: CVE-2010-4452 BID: 46388 OSVDB: 71193 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...

Oracle Java Applet2ClassLoader Vulnerability

Added: 05/05/2011 CVE: CVE-2010-4452 BID: 46388 OSVDB: 71193 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...

Sony Says Additional 25m Customers Exposed in Breach

A breach that started with the PlayStation Network has also affected Sony Online Entertainment’s 25 million customers, the company acknowledged on Tuesday. The electronics giant posted a press release on the Website of its Sony Online Entertainment division that provided additional details behind...

OrangeHRM 2.6.3 (PluginController.php) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com...

mySeatXT 0.1781 SQL Injection Vulnerability

Exploit for php platform in category web applications view source print? ------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5...

WordPress Plugin SermonBrowser 0.43 - SQL Injection

WordPress Plugin SermonBrowser 0.43 - SQL Injection alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$stri...

phpMyChat Plus 1.93 SQL Injection

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery Date..........4/25/2011...