CentOS 4 : firefox (CESA-2010:0558)

Updated firefox packages that fix a security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

firefox security update

CentOS Errata and Security Advisory CESA-2010:0558 Updated firefox packages that fix a security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores...

firefox security update

CentOS Errata and Security Advisory CESA-2010:0500 An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as...

Team Johnlong RaidenTunes 2.1.1 Cross Site Scripting

Title: Team Johnlong RaidenTunes 2.1.1 Remote Cross-Site Scripting Vulnerability Vendor: RaidenFTPDteam / Team Johnlong Software Product Web Page: http://www.raidentunes.com Summary: RaidenTunes is a Web server based + application software that allows You to setup an online music server quickly. ...

Mozilla Firefox SVG Data Processing Memory Corruption (CVE-2009-0771)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Mozilla Firefox JavaScript Array.splice Memory Corruption (CVE-2009-0773)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

Overview The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control contains a stack buffer overflow that could allow a remote attacker to execute arbitrary code on an affected system Description The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control,...

MDVA-2010:046 : webkit

This update brings a new stable version of webkitgtk, and solves the problem with processors without the SSE2 instruction set. It is easy to see if you are suffering from this bug, just try to open some webpage on epiphany Web broswser, it will crash with old webkit version. %NASLMINLEVEL 70300...

CentOS 3 / 4 : seamonkey (CESA-2010:0557)

Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 5 : w3m (CESA-2010:0565)

Updated w3m packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

RHEL 3 / 4 : seamonkey (RHSA-2010:0546)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 3 / 4 : seamonkey (RHSA-2010:0557)

Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Mac OS X : Apple Safari < 5.0.1 / 4.1.1

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.1 / 4.1.1. As such, it is potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; if description...

RHEL 4 / 5 : firefox (RHSA-2010:0547)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2010:0556 Updated firefox and xulrunner packages that fix a security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...

Mozilla Firefox字符映射错误显示漏洞

BUGTRAQ ID: 41866 CVE ID: CVE-2010-1210 Firefox是一款流行的开源WEB浏览器。 一些8位编码包含有未定义的位置，映射到了U+FFFD。在显示的时候，可能不会显示紧随之后的字符。例如，windows-1253中的 '\xD1', '\xD2', '\xD3', 'xD4'序列应为U+3A1, U+FFFD, U+3A3, U+3A4（也就是字符串ΡΣΤ），但实际结果为U+3A1, U+FFFD, U+3A4，缺少了U+3A3字符（也就是ΡΤ字符串，缺少Σ）。 在某些站点上这可能导致跨站脚本问题，因为服务器上过滤掉了某些应显示的字符。 Mozil...

Mozilla Firefox出错消息脚本文件名信息泄露漏洞

BUGTRAQ ID: 41860 CVE ID: CVE-2010-2754 Firefox是一款流行的开源WEB浏览器。 Firefox中的脚本出错处理方式会显示错误的来源，其中可能包含有敏感信息。假设 http://SampleSite.com/admin.asp 页面使用了以下逻辑： 1- 如果用户没有登录，重新定向到登录页面。 2- 如果用户不是管理员，重新定向到拒绝访问页面。 3- 如果用户为管理员，显示管理员菜单。 攻击者可以使用跨站URL劫持技术确认用户在SampleSite.com所处的状态，并继续执行有针对性的攻击。 Mozilla Firefox 3.6.x...

RedHat Update for firefox RHSA-2010:0558-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0558-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for seamonkey RHSA-2010:0557-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2010:0557-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for seamonkey RHSA-2010:0557-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2010:0557-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...