Adobe Vulnerabilities Continue to Rise

It’s no secret to anyone who has been paying attention that Adobe Reader and Acrobat have become prime targets for attackers in the last year or so, but new research shows just how dramatic the increase has been in the number of high-risk vulnerabilities identified in Adobe products recently...

Critical: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP09 update

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5 as JBEAP 4.2.0.CP09. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : ffmpeg, ffmpeg-debian regression (USN-931-2)

USN-931-1 fixed vulnerabilities in FFmpeg. The update introduced a regression when trying to play certain multimedia files. This update fixes the problem. We apologize for the inconvenience. It was discovered that FFmpeg contained multiple security issues when handling certain multimedia files. I...

NovaStor NovaNet <= 13.0 issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All - many of the following were inexplicably fixed in the latest version NovaBACKUP Network 13.0, but still, a 2.5 year run isn't too bad... http://digit-labs.org/files/exploits/novanet-own-lnx.c - - linux remote root = 12.0...

Oracle Database Multiple Vulnerabilities (January 2010 CPU)

The remote Oracle database server is missing the January 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Listener - Oracle OLAP - Application Express Application Builder - Oracle Data Pump - Oracle Spatial - Logical Standby -...

Oracle Database Multiple Vulnerabilities (April 2010 CPU)

The remote Oracle database server is missing the April 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Core RDBMS - JavaVM - Change Data Capture - Audit %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Not all error strings are encoded

A XSS vulnerability where a string could bypass the Anti-XSS mechanism has been identified. This issue corrects this problem. The severity of this issue is rated as LOW. Please see http://confluence.atlassian.com/x/ZILmD for information on other security related issues and our rating system...

USN-931-1: FFmpeg vulnerabilities

It was discovered that FFmpeg contained multiple security issues when handling certain multimedia files. If a user were tricked into opening a crafted multimedia file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the...

Mandriva Update for openssl MDVSA-2010:076 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

DSA-2035-1 apache2 - several issues

Bulletin has no description...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:070-1)

Security issues were identified and fixed in firefox : Security researcher regenrecht reported via TippingPoint's Zero Day Initiative a potential reuse of a deleted image frame in Firefox 3.6's handling of multipart/x-mixed-replace images. Although no exploit was shown, re-use of freed memory has...

VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2010-0007 Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues Issue date: 2010-04-09...

CentOS 3 / 4 : seamonkey (CESA-2010:0333)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Mozilla Warns of Unknown Root Certificate Authority in Firefox

In a startling revelation, the open-source Mozilla project says that its flagship Firefox browser contains a root certificate authority that doesn’t seem to have a known owner. It’s quite possible that this could be a legitimate root certificate that changed hands during a merger or some other...

Potential Security Issues in Bundled Dojo Library

More info at https://framework.zend.com/security/advisory/ZF2010-07...

Denapars Shop Script Bypass / Insecure Cookie / Shell Upload

======================================================================================== | Title : Denapars Shop Script Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Mozilla Firefox < 3.5.9 Multiple Vulnerabilities

Binary data 5494.prm...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

Binary data 5495.prm...

Firefox < 3.0.19 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.19. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...

Firefox < 3.5.9 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.5.9. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA 2010-...