openSUSE Security Update : MozillaFirefox (MozillaFirefox-2017)

Mozilla Firefox was upgraded to version 3.5.8, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

Debian DSA-1868-1 : kde4libs - several vulnerabilities

Several security issues have been discovered in kde4libs, core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1690 It was discovered that there is a use-after-free flaw in handling certain DOM event handlers...

Debian DSA-1866-1 : kdegraphics - several vulnerabilities

Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0945 It was discovered that the KSVG animation element implementation suffers from a NULL point...

Low: Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.1 update

JBoss Enterprise Web Server 1.0.1 is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Web Server is a fully integrated and certified set of components for hosting Java web...

Galerie Dezign-Box France - Multiple Vulnerabilities

Galerie Dezign-Box France - Multiple Vulnerabilities ======================================================================================== | Title : Galerie Dezign-Box © France Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouag...

SQL Injection and Directory Traversal vulnerabilities in Abton

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Directory Traversal уязвимостях в Abton это украинская CMS. SQL Injection: http://site/files.php?refdll=-1+union+select+version23 Directory Traversal через SQL Injection: http://site/files.php?refdll=-1+union+select+’../file.php’23...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:042)

Security issues were identified and fixed in firefox 3.0.x and 3.5.x : Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and ...

SuSE Update for kernel SUSE-SA:2010:012

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2010:012 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

RHEL 4 / 5 : acroread (RHSA-2010:0114)

Updated acroread packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Reader allows users to...

RHEL 4 : mysql (RHSA-2010:0110)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server...

openSUSE Security Update : kernel (kernel-1908)

This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-4536: drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel handles Ethernet frames that exceed the MTU by processing certain trailing payload data...

openSUSE Security Update : gnome-screensaver (gnome-screensaver-1973)

gnome-screensaver was updated to the stable release 2.28.3, fixing various bugs and security issues. Following security issues have been fixed: When resuming a system gnome-screensaver does not lock external displays that got connected while the system was suspended CVE-2010-0285: CVSS v2 Base...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

Dan Geer, In-Q-Tel

Anyone who has ever had a single conversation with Dan, or even seen him speak, will understand immediately why he’s on this list. Dan’s as smart as they come he has a Ph.D. in biostatistics! and his widely varied background gives him a truly unique perspective on security issues. His talks and...

RedHat Update for kernel RHSA-2010:0076-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0076-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for kernel RHSA-2010:0076-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0076-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

VMSA-2010-0002:VMware vCenter update release addresses multiple security issues in Java JRE

VMSA-2010-0002.4 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0002.4 VMware Security Advisory Synopsis: VMware vCenter update release addresses multiple security issues in Java JRE VMware...

SAP BusinessObjects 12 - URI redirection Cross-Site Scripting

SAP BusinessObjects 12 - URI redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/37972/info SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can...

Silverstripe CMS 2.3.4 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...