Oracle Java SE 5.x, 6.x, 7.x, 8.x Multiple Vulnerabilities (cpuapr2014) - Windows

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Java SE 6.x, 7.x, 8.x Multiple Vulnerabilities (cpuapr2014) - Windows

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Java SE Privilege Escalation Vulnerability (Feb 2014) - Windows

Oracle Java SE is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...

CVE-2014-1476

The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to obtain sensitive information via a listing page...

CVE-2013-6386

Removed by vendor...

tomcat: Session fixation in form authenticator

java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a...

Memory corruption

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

SA-CONTRIB-2013-076 - jQuery Countdown - Cross Site Scripting (XSS)

This jQuery Countdown Module enables you to display a countdown block based upon date settings. The jQuery Countdown Module does not properly sanitize the settings, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS vulnerability. This vulnerability ...

Microsoft Internet Explorer Multiple Vulnerabilities (2862772)

This host is missing a critical security update according to Microsoft Bulletin MS13-059. OpenVAS Vulnerability Test $Id: secpodms13-059.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2862772 Authors: Thanga Prakash S Copyright: Copyright c 2013 SecPo...

Oracle Java SE Multiple Vulnerabilities -01 June 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln01jun13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -01 June 13 Windows Authors: Thanga Prakash S Copyright: Copyright c...

Oracle Java SE Multiple Vulnerabilities -02 (Jun 2013) - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Multiple Vulnerabilities -04 (Jun 2013) - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Tomcat Session Fixation Vulnerability (Nov 2012) - Windows

Apache Tomcat is prone to a session fixation vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Apache Tomcat Information Disclosure Vulnerability (May 2013) - Windows

Apache Tomcat is prone to an information disclosure vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

High-risk vulnerabilities CVE-2 0 1 3-0 0 2 7 EXP, the impact of IE on all versions-bug warning-the black bar safety net

Microsoft Internet Explorer handles CPasteComma there is a use-after-free error allows constructing a malicious WEB page and entice a user to parse, can be the application context to execute arbitrary code. CVE number CVE-2 0 1 3-0 0 2 7, The impact of the version as follows: Microsoft Internet...

Oracle Java SE Multiple Vulnerabilities -02 Feb 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavasemultvuln02feb13win.nasl 28074 2013-02-22 13:41:39Z feb$ Oracle Java SE Multiple Vulnerabilities -02 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 20...

SA-CONTRIB-2013-020 - Ubercart - Cross site scripting (XSS)

The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The "full name" field in Views did not properly sanitize output. The vulnerability is mitigated by the fact that an attacker must get far enough in the checkout process to store their name with an order. C...

Drupal 6.x < 6.28 / 7.x < 7.19 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.28 or 7.x prior to 7.19. It is, therefore, potentially affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to properly sanitized user-supplied input to certain Drupal JavaScript...

Oracle Java SE Multiple Remote Code Execution Vulnerabilities (Windows)

This host is installed with Oracle Java SE and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultcodeexecutionvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Remote Code Execution Vulnerabilities Windows Authors: Antu...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...