openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...

Critical: Red Hat Security Advisory: java-1.4.2-ibm security update

Updated java-1.4.2-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact...

CVE-2010-3572

CVE-2010-3572 is described as an unspecified vulnerability in the Sound component of Oracle Java SE and Java for Business across several versions (6 Update 21; 5.0 Update 25; 1.4.2_27; 1.3.1_28) that could allow remote attackers to affect confidentiality, integrity, and availability via unknown v...

CVE-2010-3572

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...

CVE-2009-3572

OpenBSD 4.4–4.6 running on i386 kernels is affected by a local DoS due to improper handling of XMM exceptions, which can trigger a kernel panic via unspecified vectors. The CVE description and connected records identify the affected platform and symptom but do not specify exact vulnerable compone...

Sql injection

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: this might be the same issue as CVE-2005-3572...

CVE-2008-3572

CVE-2008-3572 describes a cross-site scripting (XSS) vulnerability in the Pligg application (version 9.9.5) where the web parameter category in index.php can be manipulated to inject arbitrary script/HTML. The linked sources confirm the affected product/version and the input vector but do not pro...

CVE-2007-3572

The vulnerability CVE-2007-3572 affects the Yoggie Pico and Pico Pro (web interface cgi-bin/runDiagnostics.cgi). An incomplete blacklist allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the param parameter, demonstrated with URL-encoded backtick character...