314 matches found
Persistent XSS in JIRA charting plugin Workload Pie Chart Report
The Workload Pie Chart Report included with the JIRA charting plugin contains a number of XSS vulnerabilities. This plugin is bundled with OnDemand. The configuration page contains an XSS vulnerability in custom field names. 1. Create a custom field with the name alert'custom field' 2. Try to...
Fedora 17 : ghostscript-9.05-4.fc17 (2012-13846)
This update removes some bundled libraries, notably icclib. This avoids security issue CVE-2012-4405. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 16 : ghostscript-9.05-2.fc16 (2012-13839)
This update removes some bundled libraries, notably icclib. This avoids security issue CVE-2012-4405. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Cisco Unified Service Monitor brstart sm_read_string_length Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified Service Monitor due to bundled EMC SMARTS application server. Authentication is not required to exploit this vulnerability. The flaw exists within the brstart.exe service which listen...
Adobe Acrobat - Bundled LibTIFF Integer Overflow (Metasploit)
$Id: adobelibtiff.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Novell PlateSpin Orchestrate Graph Rendering Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Platespin Orchestrate. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application utilizes a bundled component for rendering graphs. Th...
Potential Security Issues in Bundled Dojo Library
More info at https://framework.zend.com/security/advisory/ZF2010-07...
Mandrake Security Advisory MDVSA-2009:248 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:248. OpenVAS Vulnerability Test $Id: mdksa2009248.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:248 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
File bundled infection mode decryption-bug warning-the black bar safety net
Recently in the study of viruses Trojans infections and the bundled way. Find the file tied in a variety of ways I just and we explore two ways one is the additional ways, one is embedded The first way is that the Trojan program is attached in the other procedures of the head that is running the...
Insider revealed the thunder catch the chicken to achieve a method and prevention tips-vulnerability warning-the black bar safety net
The world's largest sorrow, than they are to harm you, unbeknownst to you also for him too beholden to. Such absurd things, only in the TV series appear in? You ever think of yourself will become like that? If you don't believe, after reading this article the quasi surprise you! Thundercatch the...
GLSA-200705-19 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-19 PHP: Multiple vulnerabilities Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs MOPB by Stefan Esser. The most severe of these vulnerabilities are integer overflows in wbmp.c from the G...
Quietly tell you how hackers to your system kind of Trojan horse-vulnerability warning-the black bar safety net
I believe that many friends have heard of the Trojans, always feel it is very mysterious, very difficult, but in fact with the Trojan software intelligent, a lot of hackers are able to easily achieve the attack purpose. Today, the author in the latest of a Trojan horse-the black hole 2 0 0 4, fro...
The current most popular several bundle techniques-vulnerability warning-the black bar safety net
A traditional bundle This principle is very simple, is currently the most used one. Is the B. exe attached to A. exe at the end. So when A. exe to be executed when the B. exe also follow the implementation. This bundle of code over the network. My earliest is from jingtao's an article about the...
