10431 matches found
KLA12360 ACE vulnerability in Microsoft Windows
Code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability in Human Interface Device HID to execute arbitrary code. Original advisories CVE-2011-0638 Related products Microsoft-Windows-Vista Microsoft-Windows-Server-2012 Microsoft-Windows-8...
RedHat Update for libuser RHSA-2011:0170-01
Check for the Version of libuser OpenVAS Vulnerability Test RedHat Update for libuser RHSA-2011:0170-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Devansh Kumar Jain Found Xss venerability in 4 Websites !
Devansh Kumar Jain Found Xss venerability in 4 Websites ! Devansh Kumar Jain is a 14 years old Hacker From Agra, India. He found some Xss venerable sites,as listed below : 1. https://sdb.drshnaps.com/search.php?q=scriptalertString.fromCharCode68,69,86/script%3C/script%3E 2...
DSA-2149-1 dbus - denial of service
Bulletin has no description...
RHEL 4 : kernel (RHSA-2011:0162)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0162 advisory. - kernel: tipc: heap overflow in tipcmsgbuild CVE-2010-3859 - kernel: net/packet/afpacket.c: reading uninitialized stack memory CVE-2010-387...
RHEL 4 / 5 : java-1.4.2-ibm (RHSA-2011:0152)
Updated java-1.4.2-ibm packages that fix two security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...
Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
This host is missing a critical security update according to Microsoft Bulletin MS07-056. OpenVAS Vulnerability Test $Id: gbms07-056.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability 941202 Authors: Madhuri D Copyright...
Fedora Update for opensc FEDORA-2010-19193
Check for the Version of opensc OpenVAS Vulnerability Test Fedora Update for opensc FEDORA-2010-19193 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞
BUGTRAQ ID: 45064 CVE ID: CVE-2010-4161 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 此问题源于从arg needlock = 0的tcpv4,6rcv函数调用函数skfilter时，套接字当时未能锁定。 Linux kernel 2.6.0-2.6.18 rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
[SECURITY] Fedora 14 Update: opensc-0.11.13-6.fc14
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
[SECURITY] Fedora 13 Update: opensc-0.11.13-6.fc13
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
(RHSA-2011:0001) Low: RHN Satellite Server 4 - End Of Life
On December 31st, 2010, per the life-cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here: https://access.redhat.com/support/policy/updates/satellite/ Though we ar...
WiPhire : A Wireless Penetration Testing Tool !
If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...
RHEL 4 : HelixPlayer removal (Critical) (RHSA-2010:0981)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0981 advisory. - HelixPlayer multiple flaws CVE-2010-2997, CVE-2010-4375, CVE-2010-4378, CVE-2010-4379, CVE-2010-4382, CVE-2010-4383, CVE-2010-4385,...
Critical: Red Hat Security Advisory: HelixPlayer removal
Helix Player contains multiple security flaws and should no longer be used. This update removes the HelixPlayer package from Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base score...
RHEL 4 : openssl (RHSA-2010:0977)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0977 advisory. - openssl: NETSCAPEREUSECIPHERCHANGEBUG downgrade-to-disabled ciphersuite attack CVE-2008-7270 - openssl: missing bnwexpand return value...
Fedora 13 : fontforge-20090923-4.fc13 (2010-18577)
fixes CVE-2010-4259 crash. See bug for proof of concept to test with. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
RHEL 4 : seamonkey (RHSA-2010:0967)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0967 advisory. SeaMonkey is an open source web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the...
CVE-2010-4508
The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification...
