CVE-2010-2155

Multiple cross-site scripting XSS vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 xmlnode.value, 2 zc-error text, 3 $zcversion, 4 domainname in a zc-title row, different vulnerabilities than...

CVE-2009-4882

Cross-site scripting XSS vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi...

HostFriendz.com SQL Injection

+===============================================================================+ + Copyright 2008 HostFriendz.com & SQL INJECTION + +===============================================================================+ Authors: Ivan Sanchez Product: Copyright 2008 HostFriendz Web: http://hostnomi.net...

Badoo Services Online Community Cross Site Scripting

+===============================================================================+ + © 2006–2010 Badoo Services Limited & XSS Vulnerabilities + +===============================================================================+ Authors: Ivan Sanchez Product: Badoo Services online community Web:...

RHEL 5 : curl (RHSA-2010:0273)

Updated curl packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 5 : sendmail (RHSA-2010:0237)

Updated sendmail packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 5 : openldap (RHSA-2010:0198)

Updated openldap packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 5 : brltty (RHSA-2010:0181)

Updated brltty packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

MS Secretly Fixed 2 Bugs in Recent Update

A recent security patch from Microsoft silently fixed two severe bugs that were never disclosed even though they posed a risk to many of its customers, a security researcher said. Read the full article. The Register...

CVE-2010-1505

Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors...

Intel C++ And Debugger Security Bugs

Full details at http://extendedsubset.com/?p=30 Here's an example strace: mkdir"/tmp/FLEXnet", 0777 = -1 EEXIST File exists chmod"/tmp/FLEXnet", 0777 = ... I don't have the time to track down the full extent of it, but neither do I think it should be neglected. Possibly affects other stuff using...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-2261)

This patch updates Mozilla XULRunner 3.0 engine the 1.9.0.19 release. It includes also following security fixes: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed eviden...

openSUSE Security Update : firefox35upgrade (firefox35upgrade-2262)

This patch updates Mozilla Firefox from the 3.0 stable branch to the 3.5.9 release. It includes also following security fixes: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes...

krb5 security and bug fix update

1.6.1-36.el55.3 - add upstream patch to fix a few use-after-free bugs, including one in kadmind CVE-2010-0629, 578185 1.6.1-36.el55.2 - pull changes to libkrb5 to properly handle and chase off-path referrals back from 1.7 574387...

CVE-2010-0400

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

Mozilla Foundation Security Advisory 2010-11

Mozilla Foundation Security Advisory 2010-11 Title: Crashes with evidence of memory corruption rv:1.9.2.2/ 1.9.1.8/ 1.9.0.18 Impact: Critical Announced: March 23, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.8 Firefo...

MS Discovers Over 1,800 Office 2010 Bugs

Microsoft uncovered more than 1,800 bugs in Office 2010 by tapping into the unused computing horsepower of idling PCs. Office developers found the bugs by running millions of “fuzzing” tests, said Tom Gallagher, senior security test lead with Microsoft’s Trustworthy Computing group. Read the full...

Crashes with evidence of memory corruption (rv:1.9.2.2/ 1.9.1.9/ 1.9.0.19) — Mozilla

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

Crashes with evidence of memory corruption (rv:1.9.2.2/ 1.9.1.8/ 1.9.0.18) — Mozilla

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be...

RedHat Update for kernel RHSA-2010:0146-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0146-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...