CVE-2013-0443

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOT...

PT-2013-2338

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 7 Update 11 Oracle Java SE versions prior to 6 Update 38 Oracle Java SE versions prior to 5.0 Update 38 Oracle Java SE version 1.4.2 40 and earlier OpenJDK versions 6 and 7 Description The issue affects...

CVE-2011-4942: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject arbitrary web script or HTML via the 1 subgroup or 2 confgroup parameters. NOTE: this vulnerability might require a user-assisted attack or a bypass of a CSRF...

PT-2012-2010

Name of the Vulnerable Software and Affected Versions Geeklog versions prior to 1.7.1sr1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the subgroup or conf group parameters in the admin/configuration.php file. This might require a user-assisted attack or...

FreeBSD : pycrypto -- vulnerable ElGamal key generation (f45c0049-be72-11e1-a284-0023ae8e59f0)

Dwayne C. Litzenberger of PyCrypto reports : In the ElGamal schemes for both encryption and signatures, g is supposed to be the generator of the entire Z^p group. However, in PyCrypto 2.5 and earlier, g is more simply the generator of a random sub-group of Z^p. The result is that the signature...