New Browsing Tool Keeps Firesheep At Bay

Weeks after researchers unveiled Firesheep, the Firefox Web browser plugin that makes it easy to snoop on strangers’ Facebook, Flickr and other Web 2.0 sessions, a software update from the Electronic Frontier Foundation promises to secure more Web sessions from Firesheep-enabled snooping. The...

Mandriva Update for openssl MDVSA-2010:238 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:238 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for cvs FEDORA-2010-16599

Check for the Version of cvs OpenVAS Vulnerability Test Fedora Update for cvs FEDORA-2010-16599 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Apache Shiro Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2010-3863: Apache Shiro information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Shiro 1.0.0-incubating The unsupported JSecurity 0.9.x versions are also affected Description:...

National Science Foundation Funds Purdue Data-Anonymization Project

A group of researchers from Purdue University has been awarded $1.5 million from the National Science Foundation to help fund an ongoing project that’s investigating how well current techniques for anonymizing data are working and whether there’s a need for better methods. The grant will help the...

Mozilla Foundation Security Advisory 2010-73

Mozilla Foundation Security Advisory 2010-73 Title: Heap buffer overflow mixing document.write and DOM insertion Impact: Critical Announced: October 27, 2010 Reporter: Morten Krkvik Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.12 Firefox 3.5.15 Thunderbird 3.1.6 Thunderbird...

Symantec IM Manager Multiple SQL Injection Vulnerabilities

Symantec IM Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i...

CVE-2010-3227

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class MFC Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7...

Mozilla Foundation Security Advisory 2010-69

Mozilla Foundation Security Advisory 2010-69 Title: Cross-site information disclosure via modal calls Impact: High Announced: October 19, 2010 Reporter: Eduardo Vela Nava Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9 SeaMonke...

Mozilla Foundation Security Advisory 2010-71

Mozilla Foundation Security Advisory 2010-71 Title: Unsafe library loading vulnerabilities Impact: Critical Announced: October 19, 2010 Reporter: Ehsan Akhgari, Dmitri Gribenko Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9...

Mozilla Foundation Security Advisory 2010-72

Mozilla Foundation Security Advisory 2010-72 Title: Insecure Diffie-Hellman key exchange Impact: Low Announced: October 19, 2010 Reporter: Nelson Bolyard Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9 SeaMonkey 2.0.9 Descripti...

Mozilla Foundation Security Advisory 2010-64

Mozilla Foundation Security Advisory 2010-64 Title: Miscellaneous memory safety hazards rv:1.9.2.11/ 1.9.1.14 Impact: Critical Announced: October 19, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. OpenVAS Vulnerability Test $Id: secpodms10-074.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability 2387149 Authors: Madhuri D Copyright:...

Microsoft Security Bulletin MS10-074 - Moderate Vulnerability in Microsoft Foundation Classes Could Allow Remote Code Execution (2387149)

Microsoft Security Bulletin MS10-074 - Moderate Vulnerability in Microsoft Foundation Classes Could Allow Remote Code Execution 2387149 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Microsoft...

The Folly of Internet Wiretapping

The last 10 years have seen a great number of advancements in the sophistication and usability of strong encryption programs, and many people now use encrypted messaging services by default. This has made it much simpler for people to keep their private thoughts and data private and secure, and n...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

National Science Foundation: Time for Web Makeover

The National Science Foundation NSF has doled out grants worth up to $32 million in total to a pack of universities dedicated to rethinking everything about the Internet from from its core routing system to its security architecture and addressing the emergence of cloud computing and an...

Mozilla Foundation Security Advisory 2010-60

Mozilla Foundation Security Advisory 2010-60 Title: XSS using SJOW scripted function Impact: High Announced: September 7, 2010 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.5.12 Thunderbird 3.0.7 SeaMonkey 2.0.7 Description Mozilla security researcher mozbugra4...

Mozilla Foundation Security Advisory 2010-54

Mozilla Foundation Security Advisory 2010-54 Title: Dangling pointer vulnerability in nsTreeSelection Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-56

Mozilla Foundation Security Advisory 2010-56 Title: Dangling pointer vulnerability in nsTreeContentView Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...