Important: Red Hat Security Advisory: jbossweb security update

An updated jbossweb package that fixes one security issue is now available for Red Hat JBoss Enterprise Application Platform 6.1.0 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: jbossweb security update

An update for Red Hat JBoss Enterprise Application Platform 6.1.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

CVE-2013-4702

CVE-2013-4702 : In EC-CUBE (LOCKON) Windows deployments, directory traversal via the doApiAction path (SC_Api_Operation.php) allows remote reading of arbitrary files. Affected: EC-CUBE 2.12.0–2.12.5. Root cause: traversal vectors in parameters (Operation, Service, Style, Validate, Version). Impac...

Adobe Air Code Execution and DoS Vulnerabilities (Windows)

This host is installed with Air and is prone to code execution and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeaircodeexecndosvulnwin.nasl 8176 2017-12-19 12:50:00Z cfischer $ Adobe Air Code Execution and DoS Vulnerabilities Windows Authors: Thanga Prakash S...

Adobe Air Code Execution and DoS Vulnerabilities (MAC OS X)

This host is installed with Air and is prone to code execution and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeaircodeexecndosvulnmacosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Adobe Air Code Execution and DoS Vulnerabilities MAC OS X Authors: Thanga Prakash S...

Adobe Air Code Execution and DoS Vulnerabilities - Windows

Air is prone to code execution and denial of service vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DB quote_identifier(), possible injection

The method "quoteidentifier" which is used in the DB class to make sure identifiers are quoted can be vulnerable for injection if uncleaned GET variables are passed to it, due to the way pregreplace has been used with the "/e" modifier. All released versions are affected. This has been addressed ...

Fedora Update for php-symfony2-Validator FEDORA-2013-14590

Check for the Version of php-symfony2-Validator OpenVAS Vulnerability Test Fedora Update for php-symfony2-Validator FEDORA-2013-14590 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CVE-2 0 1 3-2 4 7 1 vulnerability analysis-vulnerability warning-the black bar safety net

1, Introduction There is no exposed java vulnerability, a simple analysis of the recent CVE-2 0 1 3-2 4 7 1, learn java vulnerabilities associated principle. POC from http://packetstormsecurity. com/files/1 2 2 8 0 6/in. ps: thanks to the oo help. 2, the vulnerability causes Trigger the...

DEBIAN-CVE-2013-5029

phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php...

[SECURITY] Fedora 18 Update: hylafax+-5.5.4-1.fc18

HylaFAXtm is a enterprise-strength fax server supporting Class 1 and 2 fax modems on UNIX systems. It provides spooling services and numerous supporting fax management tools. The fax clients may reside on machines different from the server and client implementations exist for a number of platform...

ISC BIND rdata Denial Of Service Vulnerability

This vulnerability allows remote attackers to cause a denial of service condition on vulnerable installations of ISC BIND. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of an rdata section with a length that is less than four. The issue...

CVE-2013-3300

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...

CVE-2013-3300

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...

SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 8090)

This update to icedtea-2.4.1 fixes various security issues : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improve...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)

This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...

OpenJDK: Proper class checking (JMX, 8008120)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from...

OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information...

OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information...

OpenJDK: Proper class checking (JMX, 8008120)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from...