OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: um-host-kernel kernel-source kernel-syms um-host-install-initrd kernel-um kernel-default kernel-debug kernel-bigsmp kernel-smp For more information, please...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-zlib php4-shmop php4-ftp php4-filepro php4-mcrypt php4-servlet php4-gmp php4-bz2 php4-snmp php4-mysql php4-mimemagic php4 php4-pgsql modphp4-servlet...

SLES9: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: um-host-install-initrd kernel-smp kernel-source kernel-debug um-host-kernel kernel-bigsmp kernel-um kernel-syms kernel-default For more information, please...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba-client samba-doc samba-python samba-pdb samba samba-winbind libsmbclient-devel libsmbclient samba-vscan For more information, please visit the referenc...

SLES9: Security update for Mozilla

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-venkman mozilla-cs mozilla mozilla-devel mozilla-hu mozilla-ja mozilla-mail mozilla-ko mozilla-dom-inspector mozilla-deat mozilla-irc For more...

SLES9: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: um-host-install-initrd kernel-smp kernel-source kernel-debug um-host-kernel kernel-bigsmp kernel-um kernel-syms kernel-default For more information, please...

SLES9: Security update for OpenMotif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openmotif-libs openmotif openmotif-devel For more information, please visit the referenced security advisories. More details may also be found by searching f...

Microsoft Windows JavaScript engine memory corruption

Memory corruption on "arguments" keyword parsing...

CVE-2008-7089

Cross-site scripting XSS vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors...

CVE-2008-7089: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

CVE-2009-2771: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

CVE-2009-2241: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Unfixed XSS vulnerability at phpyellow.com

Security researcher 599eme Man, has submitted on 06/07/2009 a cross-site-scripting XSS vulnerability affecting phpyellow.com, which at the time of submission ranked 372234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is...

Sql injection

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" b...