JRE allows unauthorized file access and connections to localhost

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...

Comtrend HG536+ Privilege Escalation

Comtrend HG536+ vulnerabilities Vendor url:www.comtrend.com Advisore Url:http://lostmon.blogspot.com/2009/04/ comtrend-hg536-vulnerabilities.html Vendor notify: NO Description By vendor The HG536+ is an 802.11g 54Mbps wireless and wired Local Area Network WLAN ADSL router. Four 10/100 Base-T...

JavaWebStart allows unauthorized network connections

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka...

JRE allows unauthorized file access and connections to localhost

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...

MDVA-2008:088 : drakx-net

This drakx-net update provides new features for cellular connections and fixes mainly for wireless connections. It adds support for more cellular devices using cdcacm and hso drivers, and makes the network center easier to use with cellular devices. It detects better the wireless signal strength...

Mandriva Linux Security Advisory : rxvt (MDVSA-2008:161)

A vulnerability in rxvt allowed it to open a terminal on :0 if the environment variable was not set, which could be used by a local user to hijack X11 connections CVE-2008-1142. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MDVA-2008:190 : drakx-net

This update adds support for ATM bridging in the network configuration tools and backend. It is mostly used for ADSL pppoe connections with USB modems bug 35797. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandriva Linux Security Advisory : openssh (MDVSA-2008:078)

OpenSSH allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Secunia Research: Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow

====================================================================== Secunia Research 15/04/2009 - Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow - ====================================================================== Table of Contents Affected...

Microsoft ISA Server / Forefront Threat Management Gateway DoS

DoS with TCP connections to reverse HTTP proxy, crossite scripting...

Mandriva Update for drakx-net MDVA-2008:088 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:088 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for initscripts MDVA-2008:085 (initscripts)

Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDVA-2008:085 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for drakx-net MDVA-2008:088 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:088 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for initscripts MDVA-2008:085 (initscripts)

Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDVA-2008:085 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for rxvt MDVSA-2008:161 (rxvt)

Check for the Version of rxvt OpenVAS Vulnerability Test Mandriva Update for rxvt MDVSA-2008:161 rxvt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for openssh MDVSA-2008:078 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDVSA-2008:078 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for qt4 MDVSA-2008:042 (qt4)

Check for the Version of qt4 OpenVAS Vulnerability Test Mandriva Update for qt4 MDVSA-2008:042 qt4 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for ppp MDVA-2008:087 (ppp)

Check for the Version of ppp OpenVAS Vulnerability Test Mandriva Update for ppp MDVA-2008:087 ppp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Family Connections CMS 1.8.2 - Blind SQL Injection

Family Connections CMS 1.8.2 - Blind SQL Injection Salvatore "drosophila" Fresta + Application: Family Connections + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author...

Family Connections CMS <= 1.8.2 Blind SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Family Connections + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...