607 matches found
web Thunder remote arbitrary file reading vulnerability-vulnerability warning-the black bar safety net
web Thunderbolt in the design and implementation problems, leading to a malicious attacker can read the install web Thunder user on the machine any files web Thunderbolt in the present machine there is a webserver, and the binding at 0. 0. 0. 0, while for the web request processing is not...
With the FindBugs code analysis vulnerability-vulnerability warning-the black bar safety net
Static analysis tools promise without developer effort will be able to find out the code has some defects. Of course, if you have years of writing experience, you will know that these promises are not necessarily fulfilled. Nevertheless, a good static analysis tool is still in the Toolbox...
Dozens of Bugs Found in One Version of Android Kernel
Security researchers found dozens of high risk security holes in the software used to run specific Android mobile devices, but that’s still a lot better than industry averages, according to a new report. Coverity, an application code testing firm, analyzed the source code for HTC’s Droid Incredib...
YUI JavaScript library -- JavaScript injection exploits in Flash components
The YUI team reports: A security-related defect was introduced in the YUI 2 Flash component infrastructure beginning with the YUI 2.4.0 release. This defect allows JavaScript injection exploits to be created against domains that host affected YUI .swf files...
Cisco IOS HTTP Server Vulnerability - Cisco Systems
A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is enabled and browsing to "http:///%%" is attempted. This defect can be exploited to produce a denial of service DoS attack. This defect has been discussed on public...
DEBIAN-CVE-2010-2233
tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...
Microsoft Patches Worm Holes in Mail Server, Visual Basic for Apps
Microsoft today issued patches for a pair of critical remote code execution vulnerabilities in Windows and Microsoft Office and urged affected users to apply the fixes as soon as possible. The most serious issue, addressed in the MS10-030 bulletin, affects Outlook Express, Windows Mail and Window...
Zero Defect Design LLC (XSS/URL Redirecting) Multiple Vulnerability
Exploit for php platform in category web applications =================================================================== Zero Defect Design LLC XSS/URL Redirecting Multiple Vulnerability ===================================================================...
FTBBS ASP 7.0 upload vulnerability-vulnerability warning-the black bar safety net
% userid=getcookie"clubuserid" ............ if Application"FTBBSMB"7,0="M" then inFolder=yeardate&monthdate else inFolder=yeardate&monthdate&daydate end if call makefolderinFolder,fso myFolder = inFolder&"/"&userid call makefoldermyFolder,fso ................... formPath=inFolder&"/"&userid...
QQmail Multiple Xss Vulnerabilities-vulnerability warning-the black bar safety net
QQmail Multiple Xss Vulnerabilities Author: www.80vul.com 1. firefox2 css xss vulnerabilities styleBODY-moz-binding:url"http://www.80vul.coom/test.xmlxss"/style test.xml: ? xml version="1.0"?& gt; bindings xmlns="" binding id="xss" implementation constructor! CDATAalert'XSS'/constructor...
Inserted image filenames are not escaped properly as thumbnails
When you insert an image as a thumbnail into a wiki page, the generated HTML does not properly escape the filename...
SuSE 10 Security Update : hplip (ZYPP Patch Number 5556)
This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect. CVE-2008-2941 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...
Sun Java JDK/JRE 5 < Update 16 Multiple Vulnerabilities
The version of Sun Java Runtime Environment JRE 5.0 installed on the remote host is affected by multiple security issues : - A vulnerability in the XML processing module of the JRE could allow an untrusted applet/application unauthorized access to certain URL resources 238628. - A buffer overflow...
DTSA-148-1 vlc - heap-based buffer overflow
Bulletin has no description...
Protection anti is Protection error--Taoyuan disk new vulnerability-vulnerability warning-the black bar safety net
Recently I took up the study of“Taoyuan Network Hard security”related tasks. The following operation is the latest of the“Taoyuan Network Hard Disk V3. 1 Personal Edition free version”, so the following is the analysis of vulnerability is possible only for the above version is useful, but the...
DSA-1503-2 kernel-source-2.4.27 - several vulnerabilities
Bulletin has no description...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Rational ClearQuest CQ Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry...
CVE-2007-1468
Cross-site scripting XSS vulnerability in IBM Rational ClearQuest CQ Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry...
CVE-2007-1468
Cross-site scripting XSS vulnerability in IBM Rational ClearQuest CQ Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry...
CVE-2006-3857
Multiple buffer overflows in IBM Informix Dynamic Server IDS before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via 1 the getname function, as used by a sqremview, b sqremproc, c sqremperms, d sqdistfetch, and e sqdcatalog; and the 2 SET DEBUG...