6460 matches found
openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)
w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...
Moderate: Red Hat Security Advisory: openldap security update
Updated openldap packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
McAfee VirusScan On-Access Scanner Long Filename Handling Buffer Overflow
McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus threats. McAfee VirusScan...
Ipswitch Imail multiple security vulnerabilities
Format string vulnerabilities, unfiltered shell-characters, code execution...
Opera Browser Multiple Vulnerabilities july-10 (Win02)
The host is installed with Opera web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02july10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities july-10 Win02 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...
Opera Browser < 10.54 Multiple Vulnerabilities (Jul 2010) - Windows
Opera web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VTE control characters vulnerability
Control characters are not checked when setting window or icon title, making it possible to insert terminal ESC-sequences...
Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...
Code injection
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...
Google Chrome 5.0.375.99更新修复多个安全漏洞
BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...
CVE-2010-2660
Opera before 10.54 on Windows/Mac and before 10.60 on UNIX suffers from improper restriction of certain homograph characters in domain names, enabling remote attackers to spoof IDN domains. Root cause: inadequate validation of characters used in domain names. Impact: possible spoofing of the addr...
Cross site scripting
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...
Fedora 13 : GraphicsMagick-1.3.12-1.fc13 (2010-4127)
new release, with a handful of bug fixes filtering and security fix related to extended characters in filenames, see also, http://sourceforge.net/mailarchive /message.php?msgname=alpine.GSO.2.01.1002211622420.25017 at freddy.simplesystems.o rg Note that Tenable Network Security has extracted the...
Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)
Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...
Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit
Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...
Cross site scripting
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
CVE-2010-2228
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
CVE-2010-2228
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)
Exploit for windows platform in category local exploits ========================================================== Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass ========================================================== !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Wi...
