7081 matches found
CentOS Update for xterm CESA-2009:0018 centos3 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
PT-2011-1756
Name of the Vulnerable Software and Affected Versions AR Web Content Manager AWCM version 2.1 final Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the theme file parameter to specific PHP files, such as includes/window top.p...
ruby WEBrick log escape sequence
WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...
ZDI-11-182: Oracle Java IE Browser Plugin Corrupted Window Procedure Hook Remote Code Execution Vulnerability
ZDI-11-182: Oracle Java IE Browser Plugin Corrupted Window Procedure Hook Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-182 June 8, 2011 -- CVE ID: CVE-2011-0817 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Oracle -- Affected Products: Oracl...
Oracle Java IE Browser Plugin Corrupted Window Procedure Hook Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Google Chrome弹出窗口拦截器安全绕过漏洞
Bugtraq ID: 47966 CVE ID:CVE-2011-1801 Google Chrome是一款流行的WEB浏览器。 Google Chrome窗口拦截器存在安全漏洞,远程攻击者可以利用漏洞绕过安全限制,打开任意弹出窗口。 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.30...
CVE-2011-1436
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
Code injection
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
CVE-2011-1436
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
CVE-2011-1436
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
CVE-2011-1436
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
PT-2011-3131
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.57 on Linux Description The issue is related to improper interaction with the X Window System, allowing remote attackers to cause a denial of service, resulting in an application crash, via unspecified...
CVE-2011-1436: Improper Input Validation
Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service application crash via unspecified vectors...
CentOS 4 : xorg-x11 (CESA-2011:0432)
Updated xorg-x11 packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
xorg security update
CentOS Errata and Security Advisory CESA-2011:0432 Updated xorg-x11 packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
Wireshark 1.5.1 Development Release !
Wireshark 1.5.1 Development Release ! Wireshark 1.5.1 has been released. Installers for Windows, OS X, and source code are now available. New and Updated Features The following features are new or have been significantly updated since version 1.4: 1. Wireshark can import text dumps, similar to...
Internet Explorer JavaScript Opener Object Information Disclosure (MS11-018; CVE-2011-1245)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which may allow the attacker to view data from a Web page in another Internet...
xorg: xrdb code execution via crafted X client hostname
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a 1 DHCP or 2 XDMCP message...
DEBIAN-CVE-2011-0465
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a 1 DHCP or 2 XDMCP message...
Opera Web Browser Window空指针引用拒绝服务漏洞
Bugtraq ID: 46872 CNCAN ID:CNCAN-2011031601 Opera Web Browser是一款开放源代码的WEB浏览器。 Opera Web Browser不正确处理特制的WEB页,可导致引用空指针而使应用程序崩溃,造成拒绝服务攻击。 Opera Software Opera Web Browser 11.01 目前没有详细解决方案提供: http://www.opera.com/ html head titleOpera 11.01 Null Ptr Derefer/title /head body script...