8951 matches found
Moderate: Red Hat Security Advisory: icedtea-web security update
Updated icedtea-web packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Ferdows CMS 9.0.5 / Ferdows CMS Pro 1.1.0 SQL Injection / XSS
www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 and Ferdows CMS =9.0.5 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro & 9.0.5 CMS Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix: N/A 1...
Alice Modem 1111 Cross Site Scripting / Denial Of Service
German ISP 'Alice' has been shipping custom embedded devices DSL modems/routers etc. for the past few years. Their first self-branded DSL modem, Alice Modem 1111, using firmware version 4.19, is prone to at least the following two security vulnerabilities after it has passed initial configuration...
Opera Browser Multiple Vulnerabilities (Jul 2011) - Windows
Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2012-1059 · Qemu +1 · Qemu-Kvm +1
Name of the Vulnerable Software and Affected Versions: qemu-kvm version 0.14.0 and earlier Description: The issue is related to a buffer overflow in the virtio subsystem, allowing privileged guest users to cause a denial of service or gain privileges via a crafted indirect descriptor. This is...
Google Fixes Six High-Risk Bugs in Chrome, Pays Out $6k in Bounties
Google has fixed seven security vulnerabilities in its Chrome browser, including six high-priority flaws. The new release of Chrome is version 12.0.742.112 and also includes an updated version of Flash. The latest version of Chrome is the third major update from the company since just the end of...
Simple Machines Forum (SMF) < 1.1.13, 2.x < 2.0 RC5 Multiple Vulnerabilities
Simple Machines Forum SMF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
firefox, xulrunner security update
CentOS Errata and Security Advisory CESA-2011:0885 Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...
Firefox Version 5 release with fix of 5 remote code vulnerabilities
Firefox Version 5 release with fix of 5 remote code vulnerabilities Mozilla Delivers New Version of Firefox – First Web Browser to Support Do Not Track on Multiple Platforms Mozilla delivered two things today: Firefox 5 for personal computers and Android phones, and the promise to complete the ne...
RHEL 4 : seamonkey (RHSA-2011:0888)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Critical: Red Hat Security Advisory: firefox security and bug fix update
Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Mozilla Miscellaneous memory safety hazards (MFSA 2011-19)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
Mozilla Miscellaneous memory safety hazards (MFSA 2011-19)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
CVE-2011-1753
expaterl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of neste...
Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-1111-1)
Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...
[USN-1133-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-1133-1 May 24, 2011 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
Report: Facebook To Offer Bounties For Bugs
Social networking giant Facebook will soon begin paying security researchers for information on vulnerabilities in its platform, according to a report from the Hack in the Box security conference in Amsterdam. Facebook’s Chief Security Officer Joe Sullivan told Softpedia that the company would so...
RHEL 6 : pidgin (RHSA-2011:0616)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0616 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple...
Q8portals SQL injection vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: Q8portals is a foreign of asp content management system, due to design flaws, leading tosql injectionvulnerability Vulnerability type: sql injection, ascript injection, blind injection, injection vulnerabilities Google keywords: intext:Powered by: q8portals.com...