CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Fedora Update for trac FEDORA-2010-0007

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2010-0007 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for eclipse FEDORA-2010-1936

Check for the Version of eclipse OpenVAS Vulnerability Test Fedora Update for eclipse FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Using Flash upload loopholes to penetrate a server-vulnerability warning-the black bar safety net

Now a lot of sites in order to pursue the image, on the site home page using Flash rotate display, and some use the picture show;the site of the most core things content, in order to keep the site effect, and therefore will frequently update the picture or flash file in website background design...

[SECURITY] Fedora 12 Update: trac-0.11.6-1.fc12

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...

[SECURITY] Fedora 11 Update: eclipse-3.4.2-17.fc11

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...

CVE-2009-3334

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

Sql injection

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

CVE-2009-3334

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

Joomla com_jinc (newsid) Blind SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

[SECURITY] Fedora 11 Update: eclipse-3.4.2-15.fc11

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...

VulnCheck KEV: CVE-2009-1536

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service daemon outage via a series of crafted HTTP requests, aka "Remote...

CVE-2009-1164

CVE-2009-1164 affects Cisco Wireless LAN Controllers (WLC) across multiple lines of hardware (e.g., 1500/2000/2100/4100/4200/4400, WiSM, ISR module WLCs, Catalyst 3750G). The vulnerability is a Denial of Service caused by a malformed HTTP/HTTPS authentication response in the administrative web in...

[SECURITY] Fedora 11 Update: eclipse-3.4.2-13.fc11

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...

CVE-2009-2045

CVE-2009-2045 affects Cisco Video Surveillance Stream Manager firmware on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, versions before 5.3. An attacker can cause a DoS reboot by sending a malformed UDP payload to port 37000, triggering the xvcr...

CVE-2009-0899

IBM WebSphere Application Server WAS 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console ISC 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager WMM to Virtual Member...

MDVA-2008:127 : x11-driver-video-ati

This update provides an X.org ATI video driver that fixes VGA output on RS300/350/400/480 integrated Radeon chipsets. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

[DSECRG-09-013] IBM WebSphere Application Server 7.0 Multiple XSS Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-013 !!! official advisory: !!! http://dsecrg.com/pages/vul/DSECRG-09-013.html Application: IBM WebSphere Application Server Versions Affected: 7.0 and 6.1 Vendor URL: http://www.ibm.com/websphere/ Bug: Multiple XSS Vulnerabilities Exploits...

VSB website of the Integrated Management Platform 0day-vulnerability warning-the black bar safety net

Author: Ice the origin of theL. S. T Give a simple POC of: In the system/firm/firmreg. the jsp file will generate the unauthorized operation behavior, causing it to register account and upload the JSP Trojans! Reference official website: We don't do anything, this is a commercial program wow!...

Rittal CMC-TC Processing Unit II Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits ========================================================= Rittal CMC-TC Processing Unit II Multiple Vulnerabilities ========================================================= Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC...