8999 matches found
Fedora Core 10 FEDORA-2009-7998 (wireshark)
The remote host is missing an update to wireshark announced via advisory FEDORA-2009-7998. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update
Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix multiple security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP07. This update has been rated as having moderate security impact by the Red Hat Security Respon...
Hacker to Pentagon: XSS Flaws Remain
A hacker has posted a proof-of-concept attack exploiting vulnerabilities on the Pentagon’s public Website that were first exposed several months ago and remain unfixed. Read the full article. Dark Reading...
Days edge corporate website system ultimate back-end authentication flaws-vulnerability warning-the black bar safety net
Days edge corporate website system ultimate back-end authentication flaws This don't know is the author of leaving the back door or program negligence, see here code: seeion. asp if session"username""" then else response. write "alert'illegal operation, please do not try to invade the system, if...
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)
New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)
New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...
On Google Chromium OS, Microsoft Finding Flaws in Chrome and the Adobe Flash Controversy
Dennis Fisher and Ryan Naraine discuss the security bits of the Google Chromium OS, Microsoft finding a flaw in Google Chrome Frame, the Adobe Flash controversy and the ridiculous end to the France v. Ireland World Cup qualifier. SHOW NOTES Inside The Google Chrome OS Security Model Microsoft Fin...
Ubuntu 8.10 / 9.04 / 9.10 : openjdk-6 vulnerabilities (USN-859-1)
Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...
USN-859-1: OpenJDK vulnerabilities
Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...
Federal Wiretaps Busted by Researchers
Researchers at the University of Pennsylvania say they’ve discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S.The flaws they’ve found “represent a serious threat to the accuracy and completeness of wiretap records used for both criminal...
RHEL 3 / 5 : httpd (RHSA-2009:1579)
Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the...
Web Security Flaws Up 10% in 2009
Almost 80% of more than 3,000 software security flaws publicly reported so far this year have been in Web technologies such as Web servers, applications, plugins and Web browsers. That number is about 10% higher than the number of flaws reported in the same period last year — and nine out of 10 o...
RedHat Security Advisory RHSA-2009:1530
The remote host is missing updates announced in advisory RHSA-2009:1530. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. nspr provides the Netscape Portable Runtime NSPR. A flaw was found in the way Firefox handles form history. A...
Apple Plugs 58 Holes in Monster Mac OS X Update
Apple has dropped another mega-patch to cover a total of 58 documented vulnerabilities affecting the Mac OS X ecosystem. The majority of the flaws could allow a remote attacker to gain complete control of an unpatched system, meaning that this update carries an “extremely critical rating.” It...
Security Fixes for Java, BlackBerry Desktop
Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...
Adobe Patches Critical Shockwave Player Flaws
Adobe today released a patch to fix several serious security flaws in its Shockwave Player software. The update, which is rated “critical,” addresses a total of five documented vulnerabilities. The most serious flaw could allow remote code execution attacks against Windows and Mac users. From...
Mozilla Firefox Multiple Vulnerabilities (Nov 2009) - Windows
Mozilla Firefox browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cups security update
CentOS Errata and Security Advisory CESA-2009:1513 Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provide...
PAJAX Remote Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'PAJAX Remote...
