114 matches found
openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)
Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...
Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-3554
CVE-2010-3554 is referenced in multiple advisories as a vulnerability in the OpenJDK CORBA reflection component that was fixed by updating Java packages (e.g., IcedTea/OpenJDK builds). Connected documents confirm its inclusion in OpenJDK/OpenJDK-related patch lists and advisories; no explicit roo...
CVE-2010-3554
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Octobe...
Fedora 14 : java-1.6.0-openjdk-1.6.0.0-44.1.9.1.fc14 (2010-16312)
Bug 533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation - Bug 642202 - CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers 6961084,6980004 - Bug 639909 - CVE-2010-3548 OpenJDK DNS server IP address information leak 6957564 - Bug 642180 -...
Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...
CVE-2009-3554
Twiddle in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file...
CVE-2009-3554
CVE-2009-3554 affects Red Hat JBoss Enterprise Application Platform (JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07. The flaw arises in the twiddle tool where the JMX password and other command-line arguments are written to twiddle.log, enabling local users to read sensitive information. ...
CVE-2008-3554
Discuz! 6.0.1 is affected by a SQL injection in index.php via the searchid parameter in a search action. The vulnerability, caused by improper handling of the searchid input, allows remote attackers to execute arbitrary SQL commands. Public references indicate exploitable payloads exist (e.g., ex...
CVE-2007-3554
The CVE-2007-3554 entry describes a stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control (sdd.dll) used by HP Instant Support – Driver Check. A long argument to the queryHub function can allow remote code execution on affected hosts. The vulnerability affects the ActiveX control ...
HP Instant Support Driver Check HPSDDX Class (SDD) ActiveX (sdd.dll) queryHub Function Overflow
The remote host contains the SDD ActiveX control, a part of HP Instant Support. The version of this control on the remote host is reportedly affected by a buffer overflow that can be triggered by a long argument to its 'queryHub' method. If an attacker can trick a user on the affected host into...
CVE-2006-3554
Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by using a glsession cookie to inject PHP sequences into the error.log file, which ...
CVE-2006-3554
CVE-2006-3554 affects MKPortal 1.0.1 Final and is a directory traversal vulnerability in index.php. The underlying flaw allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the language cookie, demonstrated by injecting PHP sequence...