131 matches found
SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2015:1319-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES11 Security Update : java-1_6_0-ibm (SUSE-SU-2015:1509-1) (Bar Mitzvah) (Logjam)
IBM Java was updated to version 6 SR16 FP7 6.0-16.7 to fix several security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further...
SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2015:1375-1) (Bar Mitzvah) (Logjam)
java-170-ibm was updated to fix 21 security issues. These security issues were fixed : - CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment bsc938895. - CVE-2015-4748:...
RHEL 5 / 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:1604) (Logjam)
Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Satellite 5.6 and 5.7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2015:1331-1) (Bar Mitzvah) (Logjam)
IBM Java was updated to 7.1-3.10 to fix several security issues. The following vulnerabilities were fixed : - CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. -...
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2015:1329-1) (Bar Mitzvah) (Logjam)
IBM Java was updated to 7.1-3.10 to fix several security issues. The following vulnerabilities were fixed : - CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. -...
SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2015:1319-1) (Bar Mitzvah) (Logjam)
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this...
SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2015:1320-1) (Bar Mitzvah) (Logjam)
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this...
pbskids.org XSS vulnerability
Vulnerable URL: http://pbskids.org/tvschedules/localizer.html?dest=/daniel/games/=2=st=yimage=defaultgotitle==/daniel/games/="id==32423=22=12 Details: Description| Value ---|--- Patched:| Yes, at 31.08.2015 Latest check for patch:| 31.08.2015 01:28 GMT Vulnerability type:| XSS Vulnerability...
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-01 (Jul 2015) - Windows
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...
CVE-2015-2637
CVE-2015-2637 is an unspecified vulnerability in the Oracle Java SE 2D component that could allow a remote attacker to obtain sensitive information. Public details in connected docs show impact tied to Java SE / 2D and Java SX usage, with multiple IBM and SUSE advisories listing Bar Mitzvah fixes...
Ubuntu: Security Advisory (USN-2637-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-2637
HP Sprinter 12.01 is affected by CVE-2014-2637 due to a CopyRange/CopyRangeEx memory corruption vulnerability in the Tidestone Formula One ActiveX controls (TTF16.ocx). The ZDI advisory states this allows remote code execution when a vulnerable installation visits a malicious page or opens a mali...
OTRS 3.x - FAQ Module Persistent Cross-Site Scripting
Exploit Title: OTRS Faq Module - Persistent XSS Date: 2-Apr-2013 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.otrs.com Version: OTRS ITSM 3.2.x,OTRS ITSM 3.1.x,OTRS ITSM 3.0.x Tested on: Perl CVE : CVE-2013-2637 OVERVIEW The OTRS ITSM FAQ Module 3.2.x and below is vulnerable to a...
OTRS 3.x - FAQ Module Persistent Cross-Site Scripting
OTRS 3.x - FAQ Module Persistent Cross-Site Scripting Exploit Title: OTRS Faq Module - Persistent XSS Date: 2-Apr-2013 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.otrs.com Version: OTRS ITSM 3.2.x,OTRS ITSM 3.1.x,OTRS ITSM 3.0.x Tested on: Perl CVE : CVE-2013-2637 OVERVIEW The OTRS...
CVE-2011-2637
Opera browser, prior to version 11.10, contains an unspecified vulnerability that can trigger a remote denial-of-service via crafted web content. This CVE (CVE-2011-2637) is referenced across multiple advisories (e.g., Red Hat, SUSE, Gentoo GLSA-201206-03) and OpenVAS plugins. The publicly stated...
SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2637 / 2641)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...
CVE-2010-2637
CVE-2010-2637 affects IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1. The issue is that usernames and passwords are sent unencrypted in the security parameters field, allowing remote attackers to obtain sensitive information by sniffing traffic from a .NET client. The vulnerability is...
CVE-2009-2637
CVE-2009-2637 refers to a PHP remote file inclusion vulnerability in the BookLibrary (com_booklibrary) Joomla! component. The affected code path is toolbar_ext.php in the 1.5.2.4 Basic release, where an attacker can trigger arbitrary PHP code execution by supplying a URL in the mosConfig_absolute...
