[SECURITY] [DSA 2381-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2381-1 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq -...

JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability

Overview JP1/Cm2/Network Node Manager i NNMi contains vulnerabilities could allow a remote attacker to cause a denial of service DoS condition or execute arbitrary code. Impact A remote attacker could cause a denial of service DoS condition or execute arbitrary code. Solution Please refer to the...

[SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2377-1 [email protected] http://www.debian.org/security/ Nico Golde Jan 1st, 2012 http://www.debian.org/security/faq -...

telnet-encryption NSE Script

Determines whether the encryption option is supported on a remote telnet server. Some systems including FreeBSD and the krb5 telnetd available in many Linux distributions implement this option incorrectly, leading to a remote root vulnerability. This script currently only tests whether encryption...

WebSVN Multiple XSS Vulnerabilities (Dec 2011)

WebSVN is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption source: https://www.securityfocus.com/bid/50895/info HP Device Access Manager for HP ProtectTools is prone to a remote heap-memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code...

Oracle WebLogic Plugins Unspecified Remote Issue (CVE-2008-2579)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host may be affected by an unspecified remote vulnerability. Note that this issue affects the WebLogic plug-ins for Apache, Sun and IIS Web included with WebLogic Server and is only exploitable if o...

OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

[SECURITY] [DSA 2339-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2339-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 07, 2011 http://www.debian.org/security/faq -...

Ajax File and Image Manager <= 1.0 Code Injection Vulnerability - Active Check

Ajax File and Image Manager is prone to a remote PHP code injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Barracuda Archiver 650 - Input Validation Vulnerability

Document Title: =============== Barracuda Archiver 650 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=34 Release Date: ============= 2011-11-03 Vulnerability Laboratory ID VL-ID: ==================================== 34...

CVE-2010-5041

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

EnjoyGraph SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + EnjoyGraph idcateg Remote SQL Injection Vulnerabilities + Software : EnjoyGraph Communication + Download : http://www.enjoy-graph.com/fr/ + Author :...

phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability - Active Check

phpLDAPadmin is prone to a remote PHP code-injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DEBIAN-CVE-2011-4024

Cross-site scripting XSS vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2011-4024

Cross-site scripting XSS vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3549

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote attackers to affect integrity via unknown vectors related to Networking...