Threat Outbreak Alert: Fake New Payment Attachment Email Messages on January 13, 2014

Medium Alert ID: 32411 First Published: 2014 January 14 17:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain new payment details attachment for the recipient. The text in the email message attempts to convince the...

Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

DEBIAN-CVE-2011-1091

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

Oracle Java GlassFish Server Privilege Escalation Vulnerability (Jan 2011)

GlassFish Server is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Java GlassFish Server Privilege Escalation Vulnerability

The host is running GlassFish Server and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleGlassFishprevesclvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Oracle Java GlassFish Server Privilege Escalation Vulnerability Authors: Antu Sanadi Copyright:...

Code injection

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service EMS 5.1.0 through 6.0.0, Runtime Agent TRA 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix...

PT-2011-2527

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous versions 8.2.1 through 8.3.0 TIBCO Enterprise Message Service EMS versions 5.1.0 through 6.0.0 TIBCO Runtime Agent TRA versions 5.6.2 through 5.7.0 TIBCO Silver BPM Service version prior to 1.0.4 TIBCO Silver CAP Service versi...

CVE-2011-0649: Undefined Security Weakness

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service EMS 5.1.0 through 6.0.0, Runtime Agent TRA 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix...

TIBCO Security Advisory: February 1, 2011 - TIBCO Rendezvous and Enterprise MessageService

TIBCO Rendezvous and Enterprise Message Service vulnerabilities Original release date: February 1, 2011 Last revised: -- CVE-2011-0649 Source: TIBCOSoftware Inc. TIBCO Rendezvous and Enterprise Message Service vulnerabilities Original release date: February 1, 2011 Last revised: -- Source: TIBCO...

CVE-2010-4438

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

CVE-2010-4438

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

Buffer overflow

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

CVE-2010-4438

CVE-2010-4438 relates to a local privilege escalation in Oracle GlassFish Server (notably GlassFish 2.x/3.0.1 and JMS components). The OpenVAS entries confirm a GlassFish privilege-escalation vulnerability with CVSS base 5.7 (local access, partial confidentiality/integrity impact, complete availa...

CVE-2010-4438

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

PT-2011-1542

Name of the Vulnerable Software and Affected Versions Oracle GlassFish versions 2.1 through 3.0.1 Java System Message Queue version 4.1 Description The issue affects confidentiality, integrity, and availability, and is related to Java Message Service JMS, allowing local users to exploit it...

Stack overflow

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family aka RTworks before 4.0.5, and Enterprise Message Service EMS 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server aka RTserver, SmartSockets client libraries and add-on products, RTworks...

CVE-2009-1291

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family aka RTworks before 4.0.5, and Enterprise Message Service EMS 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server aka RTserver, SmartSockets client libraries and add-on products, RTworks...

CVE-2009-1291

TIBCO SmartSockets/EMS are affected by CVE-2009-1291 through a stack-based buffer overflow in inbound data handling. Affected product families: SmartSockets prior to 6.8.2, SmartSockets Product Family (RTworks) prior to 4.0.5, and EMS 4.0.0–5.1.1, used in SmartSockets Server/RTworks Server (RTser...

CVE-2009-1291: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family aka RTworks before 4.0.5, and Enterprise Message Service EMS 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server aka RTserver, SmartSockets client libraries and add-on products, RTworks...

Code injection

Unspecified vulnerability in the IBM Asynchronous I/O aka AIO or libibmaio library in the Java Message Service JMS component in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service daemon crash via vectors related to the aiogetioev2 a...