Google Chrome < 4.1.249.1064 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : - A cross-origin bypass in Google URL GURL. Issue 40445 - An HTML5 media handling issue could lead to memory corruption. Issue 40487 - A font...

Adobe Vulnerabilities Continue to Rise

It’s no secret to anyone who has been paying attention that Adobe Reader and Acrobat have become prime targets for attackers in the last year or so, but new research shows just how dramatic the increase has been in the number of high-risk vulnerabilities identified in Adobe products recently...

NovaStor NovaNet &lt;= 13.0 issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All - many of the following were inexplicably fixed in the latest version NovaBACKUP Network 13.0, but still, a 2.5 year run isn't too bad... http://digit-labs.org/files/exploits/novanet-own-lnx.c - - linux remote root = 12.0...

CVE-2010-1708

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12411...

CVE-2010-1654

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12415...

CVE-2010-1703

creationtimestamp| type| source ---|---|--- 2010-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12395...

Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability and to to an information-disclosure vulnerability. Successful exploits of the denial-of-service vulnerability will cause the affected SMTP server to stop responding, denying service to...

Net Solutions' Hack Heightens Role of ISP in App Layer Security

According to research, the malicious iframe used in the latest Network Solutions attack pointed to corpadsinc.com which then downloads Adobe exploits onto victims’ machines. The hacks raise an issue increasingly being faced by Website owners: what’s the responsibility of the ISP or service or clo...

CVE-2010-0432

creationtimestamp| type| source ---|---|--- 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12264 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12263 2010-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12330...

Nodesforum Multiple Remote File Inclusion Vulnerabilities

Nodesforum is prone to multiple remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun About Face: Out-of-Cycle Java Update Patches Critical Flaw

In a sudden about-face, Sun has rushed out a Java update to fix a drive-by download vulnerability that exposed Windows users to in-the-wild malware attacks. The patch comes less than a week after Sun told a Google researcher it did not consider the issue serious enough to warrant an out-of-cycle...

Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities

Nucleus CMS 3.51 DIRLIBS - Multiple Vulnerabilities Nucleus CMS v.3.51 DIRLIBS Multiple Vulnerability /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \...

CVE-2010-1720

creationtimestamp| type| source ---|---|--- 2010-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12200 2010-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12723...

VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability

VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "VMware is a provider of virtualization software which runs on Microsoft Windows, Linux, and Mac OS X. VMware's enterprise software,...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-2228)

Sun Java 6 was updated to Update 19, fixing a large number of security issues. CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838...

VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability

VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "iTunes is a free application for Mac or PC. It organizes and plays digital music and video on computers. It syncs all media files...

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability

VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

CVE-2010-1350

creationtimestamp| type| source ---|---|--- 2010-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12037 2010-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12191...