2735 matches found
Incorrect Certificate Validation in Java Secure Socket Extension
According to SUN it has been reported that: "the Java Secure Socket Extension JSSE may incorrectly validate the digital certificate of a web site. This may result in untrustworthy web sites being authenticated for SSL transactions. The Java Plug-in and Java Web Start may incorrectly validate the...
SonicWALL Content Filtering IP addresses can bypass URL filtering
SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name. CVE: CVE-2002-2181 Last updated: Sept. 5, 2008, 8:32 p.m...
Xoops RC3 script injection vulnerability
-------------------------------------------- | Xoops RC3 script injection vulnerability | -------------------------------------------- PROGRAM: Xoops VENDOR: http://www.xoops.org/ VULNERABLE VERSIONS: RC3.0.4,possibly previous versions IMMUNE VERSIONS: no immune current versions SEVERITY: high...
Vulnerabilities in Microsoft's Java implementation
OVERVIEW ======== Microsoft Internet Explorer comes with Java virtual machine and accompanying class packages. Multiple security vulnerabilities have been found in the Java environment. Some of these allow an attacker to deliver and run arbitrary code on the Internet Explorer or Outlook user's...
Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service
This advisory may be reproduced unmodified. Sonicwall SOHO Content Blocking Script Injection and Logfile DoS Test Unit : Sonicwall SOHO3 Firmware version: 6.3.0.0 ROM version: 5.0.1.0 Severity : Medium Issue : Sonicwall Allows administrators to block websites based on a user entered list of...
CVE-2001-1192
Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...
Microsoft Internet Explorer (IE) permits modification of URL displayed in address bar
Overview A vulnerability exists in Microsoft Internet Explorer which could could enable an attacker to spoof trusted web sites. Description A vulnerability exists in Microsoft Internet Explorer. This vulnerability could enable a web page to display the URL from a different web site in the IE...
Security Hole of MRJ 2.2.3 (Mac OS Runtime for Java) - Inconsistent Use of CODEBASE and ARCHIVE Attributes
------------------------------------------------------------------ Security Hole of MRJ 2.2.3 Mac OS Runtime for Java - Inconsistent Use of CODEBASE and ARCHIVE Attributes - http://java-house.etl.go.jp/ml/archive/j-h-b/039457.html ------------------------------------------------------------------...
Microsoft Internet Explorer 5.0/4.0.1 - JavaScript URL Redirection (MS99-043)
Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Microsoft Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 Javascript URL Redirection Vulnerability source: https://www.securityfocus.com/bid/722/info A malicious web site operator could design a web...
IE5_vuln.txt
After hearing of some confusion regarding this vulnerability I thought it might be useful to post the description from our SF database to the list. This was written up by Eric Schultze and myself, and we would like to thank Georgi Guninski, Steve Lipner, and David LeBlanc for their help. Thanks...
Microsoft Internet Explorer 5 - Download Behaviour
Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web site operator to read files on an IE5 client...
Security update 1970-01-01
...
MS11-007: Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution
None None...
Definition Updates
A broadly-released and frequent software update containing additions to a product's definition database. Definition databases are often used to detect objects with specific attributes, such as malicious code, phishing Web sites, or junk e-mail...