CVE-2009-3388

liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service application crash or execute arbitrary code via unspecified vectors, related to "memory safety issues."...

Cisco Patches Critical WebEx Vulnerabilities

Cisco today released a security update with patches for a half-dozen serious security flaws in its WebEx Recording Format WRF Player. The vulnerabilites vulnerabilities may lead to a crash of the WRF Player application, or in some cases, lead to remote code execution, the company warned. Read the...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...

RedHat Security Advisory RHSA-2009:1658

The remote host is missing updates announced in advisory RHSA-2009:1658. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...

Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION II...

RedHat Security Advisory RHSA-2009:1658

The remote host is missing updates announced in advisory RHSA-2009:1658. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...

Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities =========================================================== Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities ================================================================ phpCollegeExchange 0.1.5c Multiple SQL...

Two New Flaws Haunt Linux Kernel

A pair of new kernel vulnerabilities are threatening the security of systems running current versions of several Linux distributions. One of the flaws gives a remote attacker the ability to crash vulnerable systems and the other leads to root privileges for a local attacker. The most serious of t...

Fedora Core 10 FEDORA-2009-7998 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-7998. OpenVAS Vulnerability Test $Id: fcore20097998.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7998 wireshark Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-7998 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-7998. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix multiple security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP07. This update has been rated as having moderate security impact by the Red Hat Security Respon...

Hacker to Pentagon: XSS Flaws Remain

A hacker has posted a proof-of-concept attack exploiting vulnerabilities on the Pentagon’s public Website that were first exposed several months ago and remain unfixed. Read the full article. Dark Reading...

Days edge corporate website system ultimate back-end authentication flaws-vulnerability warning-the black bar safety net

Days edge corporate website system ultimate back-end authentication flaws This don't know is the author of leaving the back door or program negligence, see here code: seeion. asp if session"username""" then else response. write "alert'illegal operation, please do not try to invade the system, if...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)

New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)

New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...

On Google Chromium OS, Microsoft Finding Flaws in Chrome and the Adobe Flash Controversy

Dennis Fisher and Ryan Naraine discuss the security bits of the Google Chromium OS, Microsoft finding a flaw in Google Chrome Frame, the Adobe Flash controversy and the ridiculous end to the France v. Ireland World Cup qualifier. SHOW NOTES Inside The Google Chrome OS Security Model Microsoft Fin...

Ubuntu 8.10 / 9.04 / 9.10 : openjdk-6 vulnerabilities (USN-859-1)

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

USN-859-1: OpenJDK vulnerabilities

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

Federal Wiretaps Busted by Researchers

Researchers at the University of Pennsylvania say they’ve discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S.The flaws they’ve found “represent a serious threat to the accuracy and completeness of wiretap records used for both criminal...