1672 matches found
JDK improper version selection
The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors...
flash-plugin: multiple information disclosure flaws (APSB09-10)
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into 1 selecting a link or 2 completing a dialog, related to a "clickjacking vulnerability."...
[SECURITY] Fedora 10 Update: perl-IO-Socket-SSL-1.26-1.fc10
This module is a true drop-in replacement for IO::Socket::INET that uses SSL to encrypt data before it is transferred to a remote server or client. IO::Socket::SSL supports all the extra features that one needs to write a full-featured SSL client or server application: multiple SSL contexts, ciph...
Web Directory PRO Password Changer
change password Web Directory PRO MODIFY Login Password TypeSubadminAdmin Categories ArtBusinessComputersGamesHealth & FitnessNewsSportsRecreationInternetTeen & KidsReferenceEducationRegionalSocietyScienceHome & FamilyWorldShoppingWeb HostingDedicated ServersISPHardwareSoftwareSec...
Cross site scripting
Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...
CVE-2009-1454
Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...
CVE-2009-1454: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...
The 5 claims of PCI DSS snake oil salesmen
The Payment Card Industry Data Security Standard PCI DSS is fast becoming the de facto standard for securing critical infrastructure across many industries. This is because a large number of businesses much larger than originally envisioned process credit cards and are, therefore, required to be...
Fedora 10 2008-10000
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
Mandriva Update for rpmdrake MDVA-2008:131 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:131 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for gnome-screensaver MDVSA-2008:135 (gnome-screensaver)
Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:135 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for wireshark MDVSA-2008:242 (wireshark)
Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:242 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for rpmdrake MDVA-2008:123 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:123 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2009-1046
The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service memory corruption by selecting a small number of 3-byte UTF-8 characters, which...
CVE-2009-1046: Undefined Security Weakness
The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service memory corruption by selecting a small number of 3-byte UTF-8 characters, which...
Memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...
CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
CVE-2008-3217: Undefined Security Weakness
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
freePHPgallery 0.6 - Cookie Local File Inclusion
freePHPgallery 0.6 - Cookie Local File Inclusion --==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author:...
