[SECURITY] Fedora 14 Update: mono-addins-0.5-2.fc14

Mono.Addins is a generic framework for creating extensible applications, and for creating libraries which extend those applications...

XOOPS 2.5.0 <= Cross Site Scripting Vulnerability

XOOPS 2.5.0 = Cross Site Scripting Vulnerability 1. OVERVIEW The XOOPS 2.5.0 and lower versions were vulnerable to Cross Site Scripting. 2. BACKGROUND XOOPS is an acronym of eXtensible Object Oriented Portal System. It's the 1 Content Management System CMS project on www.sourceforge.net and a...

SourceForge open sources its own source !

SourceForge, the popular project hosting site, has released Allura, the software that powers its service, as Apache 2.0 licensed open source. The project to develop Allura began in 2009 and currently an instance of the software, which has also been known as "New Forge" or "Forge 2.0" during...

Watcher v1.5.1 Web security testing tool and passive vulnerability scanner download !

Watcher is a Web security testing tool and passive vulnerability scanner. This tool is in continues development and has updated it features and capabilities. Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's...

Google Chrome information disclosure vulnerability

Overview Google Chrome contains an information disclosure vulnerability. Google Chrome contains an information disclosure vulnerability caused by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

Fedora Update for monotone FEDORA-2010-16902

Check for the Version of monotone OpenVAS Vulnerability Test Fedora Update for monotone FEDORA-2010-16902 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Design/Logic Flaw

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

CVE-2010-3403: Undefined Security Weakness

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

PT-2010-4733 · Splunk · Splunk

Name of the Vulnerable Software and Affected Versions: Splunk versions 4.0.0 through 4.1.4 Description: The XML parser in Splunk allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity XXE attack. This issue affects the XML parser, which ca...

[SECURITY] Fedora 13 Update: ruby-1.8.6.399-6.fc13

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 11 Update: xar-1.5.2-6.fc11

The XAR project aims to provide an easily extensible archive format. Import ant design decisions include an easily extensible XML table of contents for ran dom access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the abili...

[SECURITY] Fedora 11 Update: httpd-2.2.15-1.fc11.1

The Apache HTTP Server is a powerful, efficient, and extensible web server...

firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to...

The Danger of Open APIs

Ninety years ago KitchenAid released their first countertop mixer, which weighed in at about 69 pounds. More interestingly, the mixer also had a special socket that allowed users to attach assorted add-ons for new functionality such as slicers, shredders and meat grinders. Today this sort of...

[SECURITY] Fedora 12 Update: ruby-1.8.6.383-6.fc12

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

JDK: XML parsing Denial-Of-Service (6845701)

Previously, a denial-of-service flaw was found in Java which allowed the creation of an inifinte loop in XML headers that would consume all CPU resources. This issue was patched and Java is no longer vulnerable to a denial-of-service flaw due to the initiation of an infinte loop by means of XML...

JDK: XML parsing Denial-Of-Service (6845701)

Previously, a denial-of-service flaw was found in Java which allowed the creation of an inifinte loop in XML headers that would consume all CPU resources. This issue was patched and Java is no longer vulnerable to a denial-of-service flaw due to the initiation of an infinte loop by means of XML...

Memory corruption

The Internet Authentication Service IAS in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed...

PT-2009-4912 · Microsoft · Windows Server 2008 R2 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Description: A remote code execution issue exists due to improper validation of MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests. This allows...

PT-2009-5949 · Microsoft · Ias +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue concerns the Internet Authentication Service IAS not properly verifying credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication...