Oracle Releases Critical Patch Update for April 2010

Oracle has released its Critical Patch Update for April 2010 to address 47 vulnerabilities across several products. This update contains the following security fixes: 7 for Oracle Database Server 5 for Oracle Fusion Middleware 1 for Oracle Collaboration Suite 8 for Oracle Application Suite 4 for...

[SECURITY] Fedora 13 Update: moin-1.9.2-2.fc13

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 12 Update: moin-1.8.7-2.fc12

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 11 Update: moin-1.8.7-2.fc11

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

Fedora Update for moin FEDORA-2010-6134

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-6134 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for moin FEDORA-2010-6012

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-6012 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

eGroupware跨站脚本和远程命令执行漏洞

BUGTRAQ ID: 38609 eGroupWare是一套PHP语言开发的团队协作软件，采用GPL的开放源码授权。 eGroupWare没有正确地过滤提交给login.php页面的lang参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击；此外由于没有正确地过滤提交给phpgwapi/js/fckeditor/editor/dialog/fckspellerpages /spellerpages/server-scripts/spellchecker.php的spellcheckerlang参数，远程用户可以注入并执行任意shell命令。 EGroupware.o...

[SECURITY] Fedora 13 Update: moin-1.9.2-1.fc13

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

Fedora Update for moin FEDORA-2010-1743

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-1743 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for moin FEDORA-2010-1712

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2010-1712 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 11 Update: moin-1.8.7-1.fc11

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

IEEE and Cloud Security Alliance Form Partnership

The Cloud Security Alliance CSA and IEEE are joining forces to ensure that best practices and standards are developed and available to provide security assurance for cloud computing. As a result of this collaboration, CSA and IEEE have been conducting a survey to identify and define the most...

Design/Logic Flaw

Cisco Collaboration Server CCS 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by 1 changing .jhtml to %2Ejhtml, 2 changing .jhtml to .jhtm%6C, 3 appending %00 after .jhtml, and 4 appending %c0%80 after .jhtml,...

CVE-2010-0641

Cross-site scripting XSS vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server CCS 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2010-0642

Cisco Collaboration Server CCS 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by 1 changing .jhtml to %2Ejhtml, 2 changing .jhtml to .jhtm%6C, 3 appending %00 after .jhtml, and 4 appending %c0%80 after .jhtml,...

CVE-2010-0641

Cross-site scripting XSS vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server CCS 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2010-0642

Cisco Collaboration Server CCS 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by 1 changing .jhtml to %2Ejhtml, 2 changing .jhtml to .jhtm%6C, 3 appending %00 after .jhtml, and 4 appending %c0%80 after .jhtml,...

CVE-2010-0642

Cisco Collaboration Server 5 is affected by CVE-2010-0642, a source-code disclosure vulnerability that lets remote attackers read JHTML files by crafting URL-encoded filename extensions (e.g., .jhtml → %2Ejhtml, .jhtml → .jhtm%6C, etc.). The affected components include multiple CCS web interfaces...

CVE-2010-0641: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server CCS 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2010-0642: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Collaboration Server CCS 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by 1 changing .jhtml to %2Ejhtml, 2 changing .jhtml to .jhtm%6C, 3 appending %00 after .jhtml, and 4 appending %c0%80 after .jhtml,...