Fedora 14 : firefox-3.6.22-1.fc14 / galeon-2.0.7-43.fc14.1 / gnome-python2-extras-2.25.3-33.fc14.1 / etc (2011-12275)

The latest version of Firefox and Thunderbird has the following changes : - Removed trust exceptions for certificates issued by Staat der Nederlanden see bug mozbz683449 and the security advisory - Resolved an issue with gov.uk websites see bug mozbz669792 Note that Tenable Network Security has...

Fedora 15 : firefox-6.0.2-1.fc15 / gnome-python2-extras-2.25.3-34.fc15 / mozvoikko-1.9.0-7.fc15 / etc (2011-12280)

The latest version of Firefox and Thunderbird has the following changes : - Removed trust exceptions for certificates issued by Staat der Nederlanden see bug mozbz683449 and the security advisory - Resolved an issue with gov.uk websites see bug mozbz669792 Note that Tenable Network Security has...

A simple analysis of the mplayer player to read. m3u File format vulnerability-vulnerability warning-the black bar safety net

Foreword:this time has been in efforts to study vulnerability analysis,and with reference to the failwest large cattle production0day, Second Edition, the storm m3u file reading vulnerabilitysee snow network-the fresh fruit was also analyzed,the younger brother not,can only follow a large cattle...

CVE-2011-0082

The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security exceptions, which might make it easier for user-assisted remote attackers to spoof an SSL server via an untrusted certificate that triggers potentially unwante...

CA ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc

Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for incoming connections on port 8014,...

CA ARCserve D2D r15 - Web Service Servlet Code Execution

CA ARCserve D2D r15 - Web Service Servlet Code Execution Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server...

IOCTL Fuzzer v1.2 Download

"IOCTL Fuzzer is a tool designed to automate the task of searching vulnerabilities in Windows kernel drivers by performing fuzz tests on them. The fuzzer's own driver hooks NtDeviceIoControlFile in order to take control of all IOCTL requests throughout the system. While processing IOCTLs, the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

CVE-2010-2477

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

PYSEC-2010-33

Withdrawn as duplicate of PYSEC-2010-32 ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service crash of worker threads via vectors that trigger uncaught exceptions...

PYSEC-2010-33

Withdrawn as duplicate of PYSEC-2010-32 ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service crash of worker threads via vectors that trigger uncaught exceptions...

PYSEC-2010-32

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service crash of worker threads via vectors that trigger uncaught exceptions...

Code injection

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service crash of worker threads via vectors that trigger uncaught exceptions...

PYSEC-2010-32

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service crash of worker threads via vectors that trigger uncaught exceptions...

CVE-2010-3198

The CVE-2010-3198 issue concerns ZServer in Zope, affecting Zope 2.10.x prior to 2.10.12 and 2.11.x prior to 2.11.7. A remote attacker can trigger uncaught exceptions that cause a denial of service by crashing worker threads. The available connected documents confirm this DoS impact and the affec...

CVE-2009-2267

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...

Design/Logic Flaw

OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service kernel panic via unspecified vectors...

CVE-2009-3572

OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service kernel panic via unspecified vectors...

CVE-2008-5720

Cross-site scripting XSS vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions...

Exodus v0.10 uri handler arbitrary parameter injection

-------------------------------------------------------------------------------- Exodus v0.10 uri handler arbitrary parameter injection by Nine:Situations:Group::strawdog tested against IE8b/xpsp3 may not work against non-English systems because of an installation bug...