Mozilla Foundation Security Advisory 2011-51

Mozilla Foundation Security Advisory 2011-51 Title: Cross-origin image theft on Mac with integrated Intel GPU Impact: High Announced: November 8, 2011 Reporter: Claus Wahlers Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Thunderbird 8.0 Description Claus Wahlers reported that random images...

Mozilla Foundation Security Advisory 2011-48

Mozilla Foundation Security Advisory 2011-48 Title: Miscellaneous memory safety hazards rv:8.0 Impact: Critical Announced: November 8, 2011 Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Thunderbird 8.0 Description Mozilla developers fixed several memory safety bugs in the browser engine us...

Digital Attic Foundation CMS - id SQL Injection

Digital Attic Foundation CMS - id SQL Injection source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Digital Attic Foundation CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Fedora Update for wireshark FEDORA-2011-15328

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-15328 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Oracle Database Multiple Vulnerabilities (January 2006 CPU)

The remote Oracle database server is missing the January 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Change Data Capture - Connection Manager - Data Pump - Data Pump Metadata API - Dictionary - Java Net...

Oracle Database Multiple Vulnerabilities (October 2009 CPU)

The remote Oracle database server is missing the October 2009 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Application Express - Auditing - Authentication - Core RDBMS - Data Mining - Data Pump - Network...

Oracle Database Multiple Vulnerabilities (July 2009 CPU)

The remote Oracle database server is missing the July 2009 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Replication - Auditing - Config Management - Core RDBMS - Listener - Network Foundation - Secure Enterprise Search...

Mozilla Releases Firefox 8 and 3.6.24

The Mozilla Foundation has released Firefox 8 and Firefox 3.6.24 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, operate with escalated privileges, cause a denial-of-services condition, obtain sensitive information, or perform a cross-si...

Linux Foundation Says UEFI Doesn't Have to Prevent Other OS Installations

The Linux Foundation has released a document outlining ways in which the UEFI secure boot specification can be used to support the installation of Linux and other open operating systems on UEFI-enabled hardware. As long as hardware vendors set up their systems in the proper way, UEFI should be no...

Mozilla Foundation Unsupported Application Detection (macOS)

According to its version, there is at least one unsupported Mozilla application Firefox and/or Thunderbird installed on the remote host. This version of the software is no longer actively maintained. Lack of support implies that no new security patches for the product will be released by the...

Fedora Project Mandating New Password and SSH Key Change

Recent site breaches like those at Kernel.org and Linux have prompted the Fedora Project to contact users to change their password and SSH public key before November 30 to avoid having their accounts marked as inactive. In a message posted on Wednesday to the Developer’s Announcements mailing lis...

X.Org X11本地权限提升和内存泄露漏洞

BUGTRAQ ID: 50002 CVE ID: CVE-2011-4818,CVE-2011-4819 X.Org是X.Org Foundation对X窗口系统的开源实现。 X.Org X11在实现上存在本地权限提升和内存泄露漏洞，远程攻击者可利用这些漏洞以提升的权限执行任意代码，使受影响计算机崩溃或获取敏感信息。 多个GLX X呼叫缺少正确的输入过滤。可访问GLX呼叫的攻击者使X服务器崩溃或在其中执行任意代码 RedHat Enterprise Linux X.org X11R6 6.x X.org X11R6 5.1 X.org X11R6 4.0 X.org X11R7 7.x...

Mozilla Foundation Security Advisory 2011-36

Mozilla Foundation Security Advisory 2011-36 Title: Miscellaneous memory safety hazards rv:7.0 / rv:1.9.2.23 Impact: Critical Announced: September 27, 2011 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.23 Thunderbird 7.0...

Mozilla Foundation Security Advisory 2011-39

Mozilla Foundation Security Advisory 2011-39 Title: Defense against multiple Location headers due to CRLF Injection Impact: Moderate Announced: September 27, 2011 Reporter: Ian Graham Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.23 Thunderbird 7.0 SeaMonkey 2.4...

Mozilla Foundation Security Advisory 2011-44

Mozilla Foundation Security Advisory 2011-44 Title: Use after free reading OGG headers Impact: Critical Announced: September 27, 2011 Reporter: sczimmer Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Thunderbird 7.0 SeaMonkey 2.4 Description sczimmer reported that Firefox crashed...

Mozilla Foundation Security Advisory 2011-40

Mozilla Foundation Security Advisory 2011-40 Title: Code installation through holding down Enter Impact: Critical Announced: September 27, 2011 Reporter: Mariusz Mlynski Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.23 Thunderbird 7.0 SeaMonkey 2.4 Description Marius...

Mozilla Foundation Security Advisory 2011-42

Mozilla Foundation Security Advisory 2011-42 Title: Potentially exploitable crash in the YARR regular expression library Impact: Critical Announced: September 27, 2011 Reporter: Aki Helin Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Thunderbird 7.0 SeaMonkey 2.4 Description...

Mozilla Foundation Security Advisory 2011-41

Mozilla Foundation Security Advisory 2011-41 Title: Potentially exploitable WebGL crashes Impact: Critical Announced: September 27, 2011 Reporter: Michael Jordan, Ben Hawkes Products: Firefox, SeaMonkey Fixed in: Firefox 7.0 SeaMonkey 2.4 Description Michael Jordon of Context IS reported that in...

ScriptFTP 'GETLIST' or 'GETFILE' Commands Remote Buffer Overflow Vulnerability

This host is installed with ScriptFTP and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodscriptftpcmdbofvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ ScriptFTP 'GETLIST' or 'GETFILE' Commands Remote Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyrigh...