Mozilla Releases Firefox updates

Mozilla has released Firefox 4.0.1, 3.6.17, and 3.5.19 to address multiple vulnerabilities. The impact of these vulnerabilities includes arbitrary code execution, privilege escalation, directory traversal, and information disclosure. US-CERT encourages users and administrators to review the Mozil...

Oracle Critical Patch Update - April 2011

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are cumulative but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should b...

Password Vault Web Access vulnerable to cross-site scripting

Overview Password Vault Web Access PVWA provided by Cyber-Ark Software, Ltd. contains a cross-site scripting vulnerability. Password Vault Web Access PVWA is a module in the Privileged Identity Management Suite that allows access via a web portal. PVWA contains a cross-site scripting vulnerabilit...

Oracle Java Access Manager And OpenSSO Unspecified Vulnerability

The host is running Access Manager or OpenSSO and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclesamnopenssounspecifiedvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Oracle Java Access Manager and OpenSSO Unspecified Vulnerability Authors: Antu Sanadi Copyright:...

SuSE 10 Security Update : novell-ipsec (ZYPP Patch Number 5888)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it. CVE-2008-3651 / CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

RealNetworks Releases Security Update for RealPlayer

RealNetworks, Inc. has released an update for RealPlayer to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks notice released on December 10, 2010 and appl...

Code injection

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206

Removed by vendor...

CVE-2010-4206

CVE-2010-4206 is a WebKit/WebKitGTK+ vulnerability described across multiple advisories as an array index error in FEBlend::apply (WebCore/graphics/filters/FEBlend.cpp). This defect was present in WebKit builds used by Google Chrome prior to 7.0.517.44 and webkitgtk before 1.2.6, among other prod...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206: Out-of-bounds Write

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

PT-2010-5354

Name of the Vulnerable Software and Affected Versions WebKit versions prior to 7.0.517.44 webkitgtk versions prior to 1.2.6 Google Chrome versions prior to 7.0.517.44 Description The issue is related to an array index error in the FEBlend::apply function, which can be triggered by a crafted SVG...

Oracle Critical Patch Update Advisory - July 2010

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

XSS Vulnerabilities in JIRA

panel:borderColor=ff0000|borderStyle=solid|bgColor=ffccccWarning: This issue is superceded by JRA-21004. Please install the patches on that issue, rather than this one. For more details, see JIRA Security Advisory -...

Fedora Core 10 FEDORA-2009-13066 (ruby)

The remote host is missing an update to ruby announced via advisory FEDORA-2009-13066. OpenVAS Vulnerability Test $Id: fcore200913066.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13066 ruby Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 11 FEDORA-2009-12552 (memcached)

The remote host is missing an update to memcached announced via advisory FEDORA-2009-12552. OpenVAS Vulnerability Test $Id: fcore200912552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12552 memcached Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-12481 (roundcubemail)

The remote host is missing an update to roundcubemail announced via advisory FEDORA-2009-12481. OpenVAS Vulnerability Test $Id: fcore200912481.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12481 roundcubemail Authors: Thomas Reinke Copyright:...

Fedora Core 11 FEDORA-2009-12786 (kernel)

The remote host is missing an update to the Linux kernel announced via advisory FEDORA-2009-12786. OpenVAS Vulnerability Test $Id: fcore200912786.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12786 kernel Authors: Thomas Reinke Copyright: Copyrigh...