HP SOA Registry Foundation multiple security vulnerabilities

Crossite scripting, code execution, privilege escalation...

CVE-2010-0826

The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module...

CMSFaethon 2.2.0 Ultimate Local / Remote File Inclusion

cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability +Vendor: CMS Faethon +Version: 2.2.0-ultimate.7z +License: GNU GENERAL PUBLIC LICENSE +Download: http://sourceforge.net/projects/cmsfaethon/files/ +Risk: High +Remote: Yes +Local: Yes +Vulnerable: Since v1.12 CMS Faethon 1.3 CMS Faethon...

Update Protection against Mozilla Firefox JIT escape Function Memory Corruption

A memory corruption vulnerability exists in Mozilla Firefox, a web browser developed by Mozilla Foundation. This flaw is due to the way Mozilla Firefox handles JIT Just-in-Time escape Function calls. A remote attacker can exploit this vulnerability by enticing a target user to open a malicious we...

Mozilla Releases Firefox 3.6.2

The Mozilla Foundation has released Firefox 3.6.2 to address multiple security issues, including a critical vulnerability that may allow a remote attacker to execute arbitrary code. US-CERT encourages users and administrators to do the following to help mitigate the risks: Review the Firefox 3.6....

Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vuln

Exploit for unknown platform in category web applications ========================================================================== Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vulnerabilities ========================================================================== Vulnerable: Th...

Mozilla Firefox Browser Engine Memory Corruption (CVE-2009-3382)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

OpenSSL 'bn_wexpand()' Multiple Vulnerabilities - Windows

OpenSSL is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Xerver HTTP Server Web Administration Denial of Service Vulnerability

This host is running Xerver HTTP Server and is prone to the Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxerverhttpserverwebadmindosvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Xerver HTTP Server Web Administration Denial of Service Vulnerability Authors: Veerendra GG...

Bournal Version Detection

This script finds the Bournal installed version and save the version in KB. OpenVAS Vulnerability Test $Id: gbbournaldetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ Bournal Version Detection Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...

Hyleos ChemView Version Detection

This script finds the installed Hyleos ChemView and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodhyleoschemviewdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Hyleos ChemView Version Detection Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http//www.secpod.com This...

Hyleos ChemView Version Detection

This script finds the installed Hyleos ChemView. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

X.Org X Server PCF Font Parser Buffer Overflow (CVE-2008-0006)

X.Org foundation's X Window System commonly X11 or X Window is a networking and display protocol which provides windowing on bitmap displays. It provides the standard toolkit and protocol to build graphical user interfaces GUIs on Unix-like operating systems and OpenVMS, and is supported by almos...

Mozilla Foundation Security Advisory 2010-01

Mozilla Foundation Security Advisory 2010-01 Title: Crashes with evidence of memory corruption rv:1.9.1.8/ 1.9.0.18 Impact: Critical Announced: February 17, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18...

Mozilla Foundation Security Advisory 2010-04

Mozilla Foundation Security Advisory 2010-04 Title: XSS due to window.dialogArguments being readable cross-domain Impact: Moderate Announced: February 17, 2010 Reporter: Hidetake Jo, TippingPoint ZDI Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3...

Mozilla Foundation Security Advisory 2010-05

Mozilla Foundation Security Advisory 2010-05 Title: XSS hazard using SVG document and binary Content-Type Impact: Moderate Announced: February 17, 2010 Reporter: Georgi Guninski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3 Description Mozilla...

Mozilla Foundation Security Advisory 2010-02

Mozilla Foundation Security Advisory 2010-02 Title: Web Worker Array Handling Heap Corruption Vulnerability Impact: Critical Announced: February 17, 2010 Reporter: Orlando Barrera II Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3 Description Securi...

Mozilla Browsers JavaScript Argument Passing Code Execution (CVE-2007-0777)

Mozilla Firefox and Seamonkey are very popular open source web browsers from Mozilla Foundation, based on the Mozilla Suite code base. The browser is an application designed for tasks related to web browsing, such as displaying HTML pages, downloading files, rendering different media, and so on...

IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability

The host is installed with IBM DB2 and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2bofvulnlinfeb10.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM DB2 'REPEAT' Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks...

Mandriva Update for ruby MDVSA-2010:017 (ruby)

Check for the Version of ruby OpenVAS Vulnerability Test Mandriva Update for ruby MDVSA-2010:017 ruby Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...