Re: Project Pier Web Vulnerabilities

Mitre has assigned the following CVE's for these issues in Project Pier: XSS: CVE-2013-3635 Session cookies lack HttpOnly flag: CVE-2013-3636 Session cookies lack Secure flag: CVE-2013-3637 On Tue, May 21, 2013 at 9:26 PM, the infinitenigma [email protected] wrote: Summary...

CVE-2012-3637

CVE-2012-3637 concerns WebKit as used in Apple Safari before 6.0. The description states that a crafted website can cause remote arbitrary code execution or a denial of service via memory corruption. Connected documents corroborate WebKit-related memory corruption issues and broader Safari/WebKit...

CVE-2011-3637

CVE-2011-3637 is a vulnerability in the Linux kernel where the m_stop function in fs/proc/task_mmu.c can trigger an OOPS via vectors that cause an m_start error. Affected: Linux kernel versions prior to 2.6.39 (i.e., 2.6.38 and earlier). Impact: local denial of service (kernel oops) without remot...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

CentOS 5 : kernel (CESA-2012:0007)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Ubuntu: Security Advisory (USN-1218-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1201-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

Adobe Flash Player Multiple Vulnerabilities (Linux)

This host is installed with Adobe Flash Player and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov10lin.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Flash Player Multiple Vulnerabilities Linux Authors: Sooraj KS Copyright: Copyright...

[FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability

FG-VD-10-020Adobe Flash Player Remote Memory corruption Vulnerability Fortinet Discovers Adobe Flash Player Vulnerability 2010.Nov.04 Summary: Fortinet's FortiGuard Labs has discovered a Memory corruption vulnerability in Adobe Flash PlayerFlash10h.ocx, which may lead to arbitrary code execution ...

CVE-2010-3637

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 Flash10h.ocx on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FLV video...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)

The remote Windows host contains a version of Adobe Flash Player 9.x before 9.0.289 or 10.x earlier than 10.1.102.64. Such versions are potentially affected by multiple vulnerabilities : - A memory corruption vulnerability exists that could lead to code execution. Note that there are reports that...

Java for Mac OS X 10.5 Update 2

The remote host is missing Java for Mac OS X 10.5 Update 2. One or more of the following components are affected: Java OpenVAS Vulnerability Test Java for Mac OS X 10.5 Update 2 LSS-NVT-2010-029 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribut...

Java for Mac OS X 10.5 Update 2

The remote host is missing Java for Mac OS X 10.5 Update 2. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora Update for alienarena FEDORA-2010-6132

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...