CentOS 6 : java-1.7.0-openjdk (CESA-2014:0406)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

IIS short file and folder disclosure vulnerability-vulnerability warning-the black bar safety net

本文 翻译 自 exploit-db.com,is hard to force Amderma children's shoes after hours of tossing,reproduced, please renowned provenance,tks. E Wen too the dish,if there is an error, please you greatly more correct. IIS is Microsoft using the Microsoft windows feature extension modules created a set ofweb...

enet(Silicon Valley power)misallocation caused by leakage of the file and fixes-vulnerability warning-the black bar safety net

Brief Description: The jsp server is improperly configured, the result%3f the leak file Detail: Relates to the directory, as an example Vulnerabilityto prove: Repair solutions:?. jsp to%3f. jsp URL encoding occurs, resulting in the processing of jsp requests to the file Assembly errors of judgmen...

Apache 2.0.43 Web服务程序非法字符HTTP请求文件泄露漏洞

No description provided by source...

YABB远程文件泄露漏洞

BugCVE: CVE-2000-0853 BUGTRAQ: 1668 YaBB.pl是一个基于Web的公告牌脚本程序。YaBB.pl它将公告牌中的文章存放在编号的文本文件中。编号的文件名是在调用YaBB.pl时通过变量num=file来指定的。在检索该文件之前，YaBB在file后面添加一个后缀.txt。 由于YaBB中的输入合法性检查错误，在file中可以指定相对路径。这包括../类型的路径。此外，file可以不是数字格式，而且.txt后缀可以通过在file后面添加%00来避免。通过在单个请求中使用上述的这些漏洞，恶意用户可以察看Web服务器可以存取的任何文件。 9.1.2000...

Mozilla Firefox 2.0.0.14存在多个远程漏洞

BUGTRAQ ID: 30038 CVE ID：CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 CVE-2008-2805 CVE-2008-2806 CVE-2008-2807 CVE-2008-2808 CVE-2008-2809 CVE-2008-2810 CVE-2008-2811 CNCVE ID：CNCVE-20082798 CNCVE-20082799 CNCVE-20082800 CNCVE-20082801 CNCVE-20082802...

Barracuda Networks垃圾邮件防火墙多个安全漏洞

Barracuda Spam Firewall是用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda垃圾邮件防火墙Login.pm脚本中的guest帐号有硬编码的口令bnadmin99。尽管guest帐号仅有有限的访问能力，但还是可以获取以下信息： 系统配置，包括IP地址、管理员IP ACL； 邮件消息日志（但没有消息的内容）； 垃圾邮件/杀毒定义的版本信息和系统固件版本。...