5190 matches found
Opera fails to verify SSL server certificates
Overview Opera contains an issue where it fails to verify SSL server certificates. Opera is a web browser. Opera contains an issue where it fails to verify SSL server certificates. Impact The user may unknowingly connect to a site that is using a certificate not authorized by a CA. As a result, t...
Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fewhois, cagtables, additionalreports, generaldatadisplay, realty, dkdfeuserbelogin, tcfbconnect, dixeasylogin, ajadofacebook, facebook2t3, sociallogin2t3, kbeventboard, news Release Date: March 28, 2012 Please...
Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)
move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...
DSA-2268-1 iceweasel - several
Bulletin has no description...
Google Fixes Six High-Risk Bugs in Chrome, Pays Out $6k in Bounties
Google has fixed seven security vulnerabilities in its Chrome browser, including six high-priority flaws. The new release of Chrome is version 12.0.742.112 and also includes an updated version of Flash. The latest version of Chrome is the third major update from the company since just the end of...
Fedora 13 : asterisk-1.6.2.17-1.fc13 (2011-2558)
The Asterisk Development Team has announced the release of Asterisk 1.6.2.17. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ The release of Asterisk 1.6.2.17 resolves several issues reported by the community and would have not been possib...
PT-2011-1132
Name of the Vulnerable Software and Affected Versions avahi versions prior to 0.6.29 avahi-glib versions 0.6.16 avahi-glib-devel versions 0.6.16 avahi-compat-howl versions 0.6.16 avahi-compat-howl-devel versions 0.6.16 avahi-qt3 versions 0.6.16 avahi-qt3-devel versions 0.6.16 avahi-devel versions...
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure
Affected products ================= Dokeos 1.8.6.1 / 2.0 Chamilo 1.8.7.1 Resume ====== Two file disclosure flaws exists on these LMS platforms, which could allow an attacker registered on the system to obtain files from the server, i.e your database configuration file, or any other file readeable...
Moderate: Red Hat Security Advisory: JBoss Web Framework Kit 1.0.0 removal
JBoss Web Framework Kit 1.0.0 contains a security flaw and should no longer be used. This update removes the JBoss Web Framework Kit 1.0.0 packages. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
PT-2011-2010 · Sudo · Sudo
Name of the Vulnerable Software and Affected Versions: sudo versions prior to 1.7.4p5-1.fc14 Description: The issue arises from improper interpretation of a system group in the sudoers file, allowing local users to gain root privileges via a sudo command. This is a result of a regression related ...
Update : Havij v1.13 automated SQL Injection tool - New version
Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...
Fedora 14 : seamonkey-2.0.10-1.fc14 (2010-17105)
Update to new upstream SeaMonkey version 2.0.10, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/se amonkey20.htmlseamonkey2.0.9 - http://www.mozilla.org/security/known-vulnerabilities/ seamonkey20.htmlseamonkey2.0.10...
Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities
====================================================================== Secunia Research 13/09/2010 - MailEnable SMTP Service Two Denial of Service Vulnerabilities - ====================================================================== Table of Contents Affected...
Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe
Overview Access Analyzer CGI from futomi's CGI Cafe contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI...
Fedora 13 : php-pear-CAS-1.1.2-1.fc13 (2010-12258)
Security fixes Fix a session hijacking hole CVE-2010-2795 PHPCAS-61 callbackurl in proxy mode should be urlencoded, possible XSS CVE-2010-2796 PHPCAS-67 Bug fixes Fix warnings for SAML responses without attributes PHPCAS-59 Fix duplicate SAML debug output PHPCAS-64 Providing a new ST/PT/SA during...
Fedora Update for ssmtp FEDORA-2010-11836
Check for the Version of ssmtp OpenVAS Vulnerability Test Fedora Update for ssmtp FEDORA-2010-11836 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
Moderate: Red Hat Security Advisory: Red Hat Certificate System 7.3 security update
Updated packages that fix multiple security issues and rebase various components are now available for Red Hat Certificate System 7.3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
PT-2010-1946 · Adobe · Shockwave Player
Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue is related to an integer overflow that might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file. Recommendations: For versions prior...
Debian DSA-2001-1 : php5 - multiple vulnerabilities
Several remote vulnerabilities have been discovered in PHP 5, an hypertext preprocessor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4142 The htmlspecialchars function does not properly handle invalid multi-byte sequences. - CVE-2009-4143 Memory...