8289 matches found
openSUSE Security Update : compiz-fusion-plugins-main (compiz-fusion-plugins-main-1990)
The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2 %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502...
CVE-2010-0170
Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via vectors that are specific to each affected plugin...
CVE-2010-0170
Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via vectors that are specific to each affected plugin...
[SECURITY] Fedora 11 Update: esorex-3.7.2-3.fc11
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...
[SECURITY] Fedora 12 Update: esorex-3.7.2-5.fc12
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...
[SECURITY] Fedora 13 Update: esorex-3.7.2-6.fc13
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...
[SECURITY] Fedora 12 Update: wireshark-1.2.6-1.fc12
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...
Debian DSA-1851-1 : gst-plugins-bad0.10 - integer overflow
It was discovered that gst-plugins-bad0.10, the GStreamer plugins from the 'bad' set, is prone to an integer overflow when processing a MED file with a crafted song comment or song name. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
Debian DSA-1839-1 : gst-plugins-good0.10 - integer overflow
It has been discovered that gst-plugins-good0.10, the GStreamer plugins from the 'good' set, are prone to an integer overflow, when processing a large PNG file. This could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)
Yahoo! Messenger is a instant messaging communicating application developed by Yahoo! Inc. When a user registers a Yahoo! user account, it is bundled with the Yahoo! Mail service, which is a web-based email service. Users can use a web browser to read, send and maintain their email messages. The...
[SECURITY] Fedora 13 Update: pidgin-2.6.6-1.fc13
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
Google to Pay For Bugs Found in Chromium
Google is starting a new program that will pay security researchers a $500 bounty for every security bug they find in Chromium, the open-source codebase behind the Google Chrome browser, as well as for bugs found in Chrome itself. The company said Thursday that the plan is both meant as a reward...
IT-Grundschutz M5.008: Regelmäßiger Sicherheitscheck des Netzes
IT-Grundschutz M5.008: Regelmäßiger Sicherheitscheck des Netzes. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95050 Diese Prüfung bezieht sich auf die 11...
Adobe Acrobat Reader Plugin Crafted URL Double Free (CVE-2007-0046)
Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. Most of th...
Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)
Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)
Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
[SECURITY] Fedora 11 Update: pidgin-2.6.5-1.fc11
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
CentOS 5 : gstreamer-plugins-base (CESA-2009:0352)
Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...
WordPress Plugin Events - SQL Injection
WordPress Plugin Events - SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...