979 matches found
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)
Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly CVE-2010-0277. In a user in a multi-user chat room has a nickname containi...
Sun Glassfish Woodstock Project 4.2 XSS
Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...
[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability
Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...
[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 663-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 652-1] New unarj packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 652-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...
Mandrake Linux Security Advisory : kernel (MDKSA-2003:066-2)
Multiple vulnerabilities were discovered and fixed in the Linux kernel. - CVE-2003-0001: Multiple ethernet network card drivers do not pad frames with null bytes which allows remote attackers to obtain information from previous packets or kernel memory by using special malformed packets. -...
Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2004:046-1)
Four security vulnerabilities were fixed with the 1.3.31 release of Apache. All of these issues have been backported and applied to the provided packages. Thanks to Ralf Engelschall of OpenPKG for providing the patches. Apache 1.3 prior to 1.3.30 did not filter terminal escape sequences from its...
[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390)
-------------------------------------------------------------------------- Debian Security Advisory DSA 482-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips)
-------------------------------------------------------------------------- Debian Security Advisory DSA 450-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2004 http://www.debian.org/security/faq -...
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated 2.4 kernel fixes vulnerabilities Advisory ID: RHSA-2003:238-01 Issue date: 2003-07-21 Updated on: 2003-07-21 Product: Red Hat Linux...
[ANNOUNCE][SECURITY] Apache 2.0.47 released
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apache 2.0.47 Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the tenth public release of the Apache 2.0 HTTP Server. This Announcement notes the significant changes in 2.0.47 as compared to 2.0.46...
[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2003 http://www.debian.org/security/faq -...
FreeBSD-SN-02:05
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SN-02:05 Security Notice The FreeBSD Project Topic: security issues in ports Announced: 2002-08-28 I. Introduction Several ports in the FreeBSD Ports Collection are affected by...
[SECURITY] New versions of su fixes security problem
==================================================================== Debian GNU/Linux Security May 13, 1998 We have received reports telling us that there was a problem with the program su from the shadow package. This has been fixed in recent uploads. We recommend you update shadow-su immediatel...
Security update 1970-01-01
...