[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-6.fc12

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

PT-2010-2251 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code by accessing an object that was not properly initialized or has be...

PT-2010-2536 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7 Description: The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code by accessing a deleted object, leading to memory corruption. A remote code...

CMSFaethon 2.2.0 Ultimate Local / Remote File Inclusion

cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability +Vendor: CMS Faethon +Version: 2.2.0-ultimate.7z +License: GNU GENERAL PUBLIC LICENSE +Download: http://sourceforge.net/projects/cmsfaethon/files/ +Risk: High +Remote: Yes +Local: Yes +Vulnerable: Since v1.12 CMS Faethon 1.3 CMS Faethon...

[SECURITY] Fedora 13 Update: moin-1.9.2-1.fc13

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

Fedora Update for moin FEDORA-2010-1712

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-1712 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for gnome-web-photo FEDORA-2010-1727

Check for the Version of gnome-web-photo OpenVAS Vulnerability Test Fedora Update for gnome-web-photo FEDORA-2010-1727 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for moin FEDORA-2010-1743

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-1743 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Firefox浏览器引擎远程内存破坏漏洞

BUGTRAQ ID: 38286 CVE ID: CVE-2010-0159 Firefox是一款流行的开源WEB浏览器。 Firefox浏览器引擎的layout/generic/nsBlockFrame.cpp文件中的nsBlockFrame::StealFrame 函数中存在内存破坏漏洞。用户受骗访问了恶意网页就可能触发这个漏洞，导致浏览器崩溃或执行任意代码。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla Thunderbird 3.0 Mozilla SeaMonkey 2.0 临时解决方法： 禁用JavaScript。...

[SECURITY] Fedora 11 Update: moin-1.8.7-1.fc11

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 11 Update: gnome-web-photo-0.7-10.fc11

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Huawei HG510 CSRF, Auth Bypass, DoS

Hello, Huawei HG510 is a device offered by the Serbian telecom operator, to provide ADSL Internet connection. Administration of settings on this device is allowed only from local LAN network but not only from private IP address eg 192.168.1.1 then You can access with public IP address only from...

Microsoft Windows Embedded OpenType Font Integer Overflow (MS09-029; CVE-2009-0232)

Embedded OpenType EOT fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on web pages. These files usually use the extension ".eot". The Embedded OpenType EOT Font Engine is a Microsoft Windows component that enables Windows applications, such as Microsoft...

Microsoft Windows Embedded OpenType Font Heap Buffer Overflow (MS09-029; CVE-2009-0231)

Embedded OpenType EOT fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on web pages. These files usually use the extension ".eot". The Embedded OpenType EOT Font Engine is a Microsoft Windows component that enables Windows applications, such as Microsoft...

Workaround for Microsoft Embedded OpenType Font Heap Overflow Vulnerability (MS10-001)

A remote code execution vulnerability has been reported in the way that the Microsoft Windows Embedded OpenType EOT Font Engine decompresses specially crafted EOT fonts. EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit this vulnerability via a...

I Have Only One Security Prediction for 2010

Instead of the usual top ten lists that are all-too-common with predictions for the new year, I have just one: 2010 will be the year of desktop applications handling untrusted data in sandboxed processes, and it will be about time. Since the release of Windows XP SP2, there have been significantl...

[SECURITY] Fedora 11 Update: gnome-web-photo-0.7-9.fc11

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious SWF file. The specific flaw exists in the...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...