Fedora 18 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18 (2013-0853)

This update fixes rhbz895035 , which consists of a set of flaws that potentially allow arbitrary code execution including remotely via applets. It is strongly recommended that all Java users in Fedora immediately update to this release. Note that Tenable Network Security has extracted the precedi...

CentOS 5 : ruby (CESA-2013:0129)

Updated ruby packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Scientific Linux Security Update : ruby on SL5.x i386/x86_64 (20130108)

It was found that certain methods did not sanitize file names before passing them to lower layer routines in Ruby. If a Ruby application created files with names based on untrusted input, it could result in the creation of files with different names than expected. CVE-2012-4522 It was found that...

Oracle MySQL Server 'InnoDB'子组件远程安全漏洞(CVE-2012-0572)

BUGTRAQ ID: 57385 CVECAN ID: CVE-2012-0572 Oracle MySQL Server是一个小型关系型数据库管理系统。 Oracle MySQL Server 5.1.66、5.5.28及更早版本存在远程安全漏洞，此漏洞可通过'MySQL'协议加以利用，'InnoDB'子组件受到影响。通过身份验证的远程攻击者可利用此漏洞影响可用性。 0 Oracle MySQL Server = 5.5.28 Oracle MySQL Server = 5.1.66 厂商补丁： Oracle ------...

CentOS 5 : libvirt (CESA-2013:0127)

Updated libvirt packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 5 / 6 : java-1.7.0-openjdk (CESA-2013:0165)

Updated java-1.7.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS 5 : net-snmp (CESA-2013:0124)

Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Fedora 16 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16 (2013-0888)

This update fixes rhbz895035 , which consists of a set of flaws that potentially allow arbitrary code execution including remotely via applets. It is strongly recommended that all Java users in Fedora immediately update to this release. Note that Tenable Network Security has extracted the precedi...

Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x, SL6.x i386/x86_64 (20130116)

Two improper permission check issues were discovered in the reflection API in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2012-3174, CVE-2013-0422 This erratum also upgrades the OpenJDK package to IcedTea7 2.3.4. All running...

Scientific Linux Security Update : net-snmp on SL5.x i386/x86_64 (20130108)

An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base MIB subtree handled by the 'extend' directive in '/etc/snmp/snmpd.conf' could use this flaw to crash snmpd via a crafted SNMP GET request. CVE-2012-2141 Bug...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle Java Runtime Environment 未明远程代码执行漏洞(CVE-2012-3174)

Bugtraq ID:57312 CVE ID:CVE-2012-3174 Oracle Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案 Oracle Java Runtime Environment存在一个未明安全漏洞，允许攻击者构建恶意WEB页，诱使用户解析，可以应用程序上下文执行任意代码 0 Sun JRE Windows Production Release 1.7.04 Sun JRE Windows Production Release 1.7.02 Sun JRE Solaris Production Release...

Debian DSA-2607-1 : qemu-kvm - buffer overflow

It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...

Nagios 3.x Remote Command Execution(CVE-2012-6096)

No description provided by source. !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically...

CVE-2012-5146

Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL...

CVE-2012-5145

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout...

CVE-2012-5146

CVE-2012-5146 affects Google Chrome/ Chromium. Description: remote attackers could bypass the Same Origin Policy via a malformed URL. Impact: SOP bypass (highly sensitive security policy). Affected versions: Chrome prior to 24.0.1312.52. Mitigation: upgrade to Chrome 24.0.1312.52 or newer (as ind...

CVE-2012-5154

CVE-2012-5154 affects Google Chrome on Windows: an integer overflow in shared memory allocation could cause a denial of service or possibly other impact in versions before 24.0.1312.52. This is documented in the NVD entry and echoed in OpenVAS/NASL entries, but exploitation status is not provided...

CVE-2012-5153

CVE-2012-5153 affects Google V8 before 3.14.5.3 used in Chrome before 24.0.1312.52, with exploitation via crafted JavaScript causing out-of-bounds stack access leading to possible DoS or unspecified impact. Remediation per connected docs is to upgrade to the patched V8/Chromium versions (e.g., V8...

CVE-2012-5156

Google Chrome, before 24.0.1312.52, contains a use-after-free vulnerability in PDF field handling that could allow a remote attacker to cause a denial of service (and possibly other impact). Exploitation is via vectors involving PDF fields. Remediation is to upgrade Chrome to 24.0.1312.52 or newe...