XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

HTTP Client Basic Authentication Credential Collector

This module responds to all requests for resources with a HTTP 401. This should cause most browsers to prompt for a credential. If the user enters Basic Auth creds they are sent to the console. This may be helpful in some phishing expeditions where it is possible to embed a resource into a page...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - A heap overflow flaw was found in the Linux kernel's Transparent Inter-Process Communication protocol TIPC implementation. A local, unprivileged user could use this flaw to escalate their privileges. CVE-2010-3859, Important - Missing sanity...

Virtual Infrastructure topology is not available in SCOM console

Challenge Despite the OmTopology.xml being created in the Collector installation folder the Veeam views in SCOM are empty, and the OperationsManager logs on the Collector server contain events 999 with the following message: Error Loading XML document C:\Program Files\Veeam\Veeam Virtualization...

[SECURITY] Fedora 16 Update: gc-7.2b-2.fc16

The Boehm-Demers-Weiser conservative garbage collector can be used as a garbage collecting replacement for C malloc or C++ new...

[SECURITY] Fedora 17 Update: gc-7.2b-2.fc17

The Boehm-Demers-Weiser conservative garbage collector can be used as a garbage collecting replacement for C malloc or C++ new...

Fedora Update for gc FEDORA-2012-9637

Check for the Version of gc OpenVAS Vulnerability Test Fedora Update for gc FEDORA-2012-9637 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

VM Right-Sizing report fails with error "Query execution failed for dataset ‘AnalysisDS’"

Challenge VM Right-Sizing report fails with the following error: Query execution failed for dataset 'AnalysisDS'. Error converting data type varchar to numeric. Cause The error occurs because of unsupported decimal separator format on the Collector machine. A dot . is expected as the decimal...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5807)

Mozilla Firefox was updated to 10.0.1 to fix critical bugs and security issue. The following security issue has been fixed : - Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs...

Mozilla Products XBL Binding Memory Corruption Vulnerability - (Windows)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsxblbindmemcrptnvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products XBL Binding Memory Corruption Vulnerability - Windows...

Mandriva Update for firefox MDVSA-2012:017 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2012:017 firefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2012-0452

Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger failure of an...

CVE-2012-0452

Technical details about CVE-2012-0452 are not publicly provided in the connected documents. The initial description lists the vulnerability and affected products, but no further technical specifics or patch information are included here. Monitor for updates.

CVE-2012-0452

Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger failure of an...

use after free in nsXBLDocumentInfo::ReadPrototypeBindings — Mozilla

Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This...

Cain & Abel v4.9.43 Released

Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...

OpenJDK: RMI DGC server remote code execution (RMI, 7077466)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.233 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to...

After the "maindb.xml" file has been re-created the collector gets lost in nworks Enterprise Manager

The collector gets lost in nworks Enterprise Manager after the "maindb.xml" file has been re-created...

[SECURITY] Fedora 14 Update: pl-5.7.11-7.fc14

ISO/Edinburgh-style Prolog compiler including modules, autoload, libraries, Garbage-collector, stack-expandor, C/C++-interface, GNU-readline interface, very fast compiler. Including packages clib Unix process control and sockets, cpp C++ interface, sgml reading XML/SGML, sgml/RDF reading RDF into...