97 matches found
Important: Red Hat Security Advisory: java-1.6.0-openjdk security update
Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Important: Red Hat Security Advisory: java-1.7.0-openjdk security update
Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Mac OS X : Java for OS X 2012-006
The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2012-006 update, which updates the Java version to 1.6.037. It is, therefore, affected by several security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...
CVE-2012-4416
CVE-2012-4416 describes an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier. It could allow remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot. The related N...
CVE-2010-4416
CVE-2010-4416 concerns Oracle GoldenGate Veridata Server (Oracle Fusion Middleware 3.0.0.4). The connected advisories describe a buffer/boundary overflow in the server when parsing XML SOAP requests containing an overly long tag string. This flaw can allow a remote attacker to execute arbitrary c...
Debian DSA-1978-1 : phpgroupware - several vulnerabilities
Several remote vulnerabilities have been discovered in phpgroupware, a Web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4414 A SQL injection vulnerability was found in the authentication module. -...
CVE-2009-4416
Cross-site scripting XSS vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw" sequence...
CVE-2009-4416
The CVE-2009-4416 issue affects phpgroupware, specifically the login.php module, where an input validation flaw allows cross-site scripting via arbitrary parameters starting with phpgw_. This is documented in Debian DSA-1978-1 and related OpenVAS entries, which describe multiple remote vulnerabil...
CVE-2009-4416
Cross-site scripting XSS vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw" sequence...
HP-UX PHKL_38987 : HP-UX, Local Denial of Service (DoS) (HPSBUX02389 SSRT080141 rev.1)
s700800 11.31 vm cumulative patch : A potential security vulnerability has been identified in HP-UX. The vulnerability could be exploited locally to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...
CVE-2008-4416
HP-UX kernel vulnerability CVE-2008-4416 affects HP-UX B.11.31; local users can cause a denial of service via unspecified vectors. Patch PHKL_38987 (or later) resolves the issue per HP Security Bulletin HPSBUX02389; corroborated by OpenVAS and related sources. No exploitation details are provided...
[security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01615952 Version: 1 HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...
CVE-2007-4416
captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...
CVE-2007-4416
CVE-2007-4416 concerns BellaBook (aka BellaBuffs) where captcha.php can let remote attackers obtain administrative privileges by sending the admin_name in a pheap_login cookie. The vendor disputes the flaw, noting authentication depends on admin_pass and secret variables in addition to admin_name...
CVE-2006-4416
CVE-2006-4416 : Untrusted search path in the mkvg command affects IBM AIX 5.2 and 5.3. Local users can gain privileges by manipulating the PATH to invoke a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program. The available sources describe the vulnerable component and the mech...
CVE-2005-4416
The CVE-2005-4416 issue affects TML CMS 0.5 and is caused by a SQL injection in the index.php file, allowing remote attackers to insert or alter SQL commands via the id parameter . The available sources (NVD/CVE records) report this as a direct vulnerability with the impact of enabling partial co...
