Important: Red Hat Security Advisory: jakarta-commons-fileupload security update

An updated jakarta-commons-fileupload package that fixes one security issue is now available for Red Hat JBoss Web Server 1.0.2 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...

DEDECMS website management system template execution vulnerability-vulnerability warning-the black bar safety net

DEDECMS website management system template execution vulnerability One not careful, your server will be hacked, such as database password is too simple, the server password is too simple, or CMS system vulnerabilities. The following is a DEDE of the template execution vulnerability. Vulnerability...

CVE-2013-4221

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML...

CVE-2013-4271

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221...

Default configuration

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML...

CVE-2013-4221

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML...

CVE-2013-4271

The Restlet framework vulnerability CVE-2013-4271 affects the ObjectRepresentation class in Restlet before 2.1.4. The issue arises when deserializing data from untrusted sources, using Java XMLDecoder, which can lead to remote code execution if an attacker provides a crafted serialized object. Th...

CVE-2013-4221

The Restlet vulnerability CVE-2013-4221 affects Restlet before 2.1.4, where ObjectRepresentation deserializes objects from untrusted sources using XMLDecoder. This allows remote attackers to execute arbitrary Java code via crafted XML, through the deserialization process on the server. Impact is ...

Memory corruption

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript code that uses the onpropertychange event handler, as exploit...

Persistent cross-site scripting (XSS) via DailyMotionRenderer

A number of renderer classes used by the widget macro were previously identified that contained URL validation flaws leading to persistent cross-site scripting XSS vulnerabilities. The modified classes now make use of the isUrlMatch method from the WidgetConnectorUtil class in the implementation ...

Remoting: DoS by file descriptor exhaustion

The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service file descriptor consumption via...

Remoting: DoS by file descriptor exhaustion

The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service file descriptor consumption via...

Remoting: DoS by file descriptor exhaustion

The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service file descriptor consumption via...

Amazon Linux AMI : ruby (ALAS-2013-173)

It was discovered that Ruby's REXML library did not properly restrict XML entity expansion. An attacker could use this flaw to cause a denial of service by tricking a Ruby application using REXML to read text nodes from specially crafted XML content, which will result in REXML consuming large...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2012-136) (ROBOT)

Multiple improper permission check issues were discovered in the Beans, Swing, and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2012-5086 , CVE-2012-5084 , CVE-2012-5089 Multiple improper permission check issues...

Important: Red Hat Security Advisory: jbossweb security update

An updated jbossweb package that fixes one security issue is now available for Red Hat JBoss Enterprise Application Platform 6.1.0 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: jbossweb security update

An update for Red Hat JBoss Enterprise Application Platform 6.1.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

CVE-2013-4702

CVE-2013-4702 : In EC-CUBE (LOCKON) Windows deployments, directory traversal via the doApiAction path (SC_Api_Operation.php) allows remote reading of arbitrary files. Affected: EC-CUBE 2.12.0–2.12.5. Root cause: traversal vectors in parameters (Operation, Service, Style, Validate, Version). Impac...

Adobe Air Code Execution and DoS Vulnerabilities (Windows)

This host is installed with Air and is prone to code execution and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeaircodeexecndosvulnwin.nasl 8176 2017-12-19 12:50:00Z cfischer $ Adobe Air Code Execution and DoS Vulnerabilities Windows Authors: Thanga Prakash S...

Adobe Air Code Execution and DoS Vulnerabilities (MAC OS X)

This host is installed with Air and is prone to code execution and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeaircodeexecndosvulnmacosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Adobe Air Code Execution and DoS Vulnerabilities MAC OS X Authors: Thanga Prakash S...