RedHat Security Advisory RHSA-2009:1200

The remote host is missing updates announced in advisory RHSA-2009:1200. The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software...

Fedora Core 10 FEDORA-2009-8337 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-8337. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

RedHat Security Advisory RHSA-2009:1201

The remote host is missing updates to OpenJDK 6 Software Development Kit announced in advisory RHSA-2009:1201. For details on the issues addressed in this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: RHSA20091201.nasl 6683 2017-07-12 09:41:57Z cfischer ...

Fedora Core 11 FEDORA-2009-8329 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-8329. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1161)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-20.b16.fc10 (2009-8337)

Urgent security fixes have been included. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1162)

The Sun Java JRE /JDK 5 was updated to Update 20 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...

openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1162)

The Sun Java JRE /JDK 5 was updated to Update 20 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...

java security update

CentOS Errata and Security Advisory CESA-2009:1201 Updated java-1.6.0-openjdk packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages...

Sun Java运行时环境音频系统信息泄露漏洞

BUGTRAQ ID: 35939 CVECAN ID: CVE-2009-2670 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Java运行时环境音频系统中的安全漏洞可能允许不可信任的Applet或Java Web Start应用访问java.lang.System属性。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5.0 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1199-01）以及相应补丁: RHSA-2009:1199-01：Critical:...

CVE-2009-2670

The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java Web Start applications, which allows context-dependent attackers to obtain sensiti...

CVE-2009-2670

CVE-2009-2670 affects Sun Java Runtime Environment (JRE) in JDK/JRE 6 prior to Update 15 and JDK/JRE 5.0 prior to Update 20. The issue arises from the JRE audio system not preventing access to java.lang.System properties by untrusted applets and Java Web Start applications, enabling a context-dep...

CVE-2008-2670

CVE-2008-2670 affects Insanely Simple Blog 0.5 and earlier. The vulnerability is SQL injection in index.php, exploitable via the id or term parameters in a search action, enabling remote arbitrary SQL execution. The current_subsection parameter is noted as covered by CVE-2007-3889. No patch/versi...

CVE-2008-2670

creationtimestamp| type| source ---|---|--- 2008-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5774...

CVE-2007-2670

Summary: CVE-2007-2670 affects PHPChain 1.0 and earlier. The vulnerability arises from invalid values of the catid parameter in settings.php or cat.php, enabling remote attackers to disclose the installation path via XSS manipulations. The provided documents do not specify a patched version or re...

CVE-2004-2670

Affected software: eNdonesia 8.3 (publisher module) with mod.php. Vulnerable component/file: mod.php in the publisher module; issue stems from cross-site scripting (XSS) in two input vectors. Payload vectors: (1) mod parameter in a viewcat operation, (2) query parameter in a search operation. Imp...

CVE-2004-2670

Multiple cross-site scripting XSS vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter in a viewcat operation or 2 the query parameter in a search operation in the publisher module...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2670

CVE-2006-2670 affects ChatPat 1.0. The description reports multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via chat messages in fastchat.php and fastshow.php. Affected component: ChatPat 1.0 web chat; root cause: input-derived script execution. Impact per NVD: ...