75 matches found
RHEL 6 : java-1.7.0-oracle (RHSA-2012:1391)
Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...
Critical: Red Hat Security Advisory: java-1.6.0-sun security update
Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Critical: Red Hat Security Advisory: java-1.7.0-oracle security update
Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...
CVE-2012-3202
Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion Middleware 28.2.4 and earlier, and 27.7.3 and earlier, when using JDK/JRE 5 or 6, allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this overlaps...
Mac OS X : Java for OS X 2012-006
The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2012-006 update, which updates the Java version to 1.6.037. It is, therefore, affected by several security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...
CVE-2011-5083
Affected software: Dotclear 2.3.1 and 2.4.2. Vulnerable component: inc/swf/swfupload.swf. Issue: Unrestricted file upload allowing remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension and accessing it via direct request in an unspecified directory. Root cause: u...
CVE-2010-5083
SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...
CVE-2010-5083
CVE-2010-5083 : A SQL injection vulnerability exists in the Web_Links module of PHP-Nuke 8.0, allowing remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php. The issue is caused by unsanitized input in that parameter, with potential partial confi...
CVE-2010-5083
SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...
CVE-2009-5083
CVE-2009-5083 affects IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 prior to 6.2.0.2 when configured as an OpenID relying party. The underlying issue is that the component does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, allowing a remote...
CVE-2007-5083
BrightStor HSM CsAgent contains multiple remote vulnerabilities (CVE-2007-5082/5083/5084) in r11.5 that allow an unauthenticated attacker to execute arbitrary code via CsAgent commands over TCP port 2000 due to stack/heap buffer and integer overflow issues. iDefense/CVEs describe several buffer o...
iDefense Security Advisory 09.27.07: Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities
Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities iDefense Security Advisory 09.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 27, 2007 I. BACKGROUND Computer Associates BrightStor Hierarchical Storage Manager HSM is an application used to create a tiered storage...
[CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities
Title: CAID 35690, 35691, 35692: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities CA Vuln ID CAID: 35690, 35691, 35692 CA Advisory Date: 2007-09-26 Reported By: Sean Larsson, iDefense Labs anonymous researcher working with the iDefense VCP Aaron Portnoy of DV Labs...
CVE-2006-5083
PHP remote file inclusion vulnerability in includes/functionsportal.php in Integrated MODs IM Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5083
CVE-2006-5083 describes a PHP remote file inclusion vulnerability in the Includes/functions_portal.php file of Integrated MODs (IM) Portal, affecting version 1.2.0 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the phpbb_root_path paramet...