Design/Logic Flaw

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

Design/Logic Flaw

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

CVE-2010-3541

CVE-2010-3541 affects Oracle Java SE/Java for Business (e.g., 6 Update 21; 5.0 Update 25; 1.4.2_27; 1.3.1_28) and is linked in OpenVAS/SUSE advisories. The Connected/OpenVAS entries note the vulnerability arises from limit setting of some request headers in HttpURLConnection, impacting confidenti...

CVE-2010-3541

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

CVE-2010-3541

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

Design/Logic Flaw

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass...

CVE-2009-4998

The vulnerability described as CVE-2009-4998 affects the Workplace (WP) component of IBM FileNet P8 Application Engine (P8AE) . It applies to versions 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007 , in certain FileTracker configurations. The issue is that the component does not app...

CVE-2009-4998

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass...

Mozilla Bug Seen as Very Low Risk

Mozilla has been aware of the Firefox iFrame bug that came to light yesterday for more than two months now and the company’s engineers concluded early on in the process that the problem was a fairly minor one that was unlikely to cause the vast majority of users any confusion or be exploited by...

VirtualPC Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VirtualPC virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47800;...

VMware Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VMware virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47761;...

VirtualBox Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VirtualBox virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47801;...

Microsoft to Share Vulnerability Details with Governments

Microsoft today announced plans to share pre-patch details on software vulnerabilities with governments around the world under a new program aimed at securing critical infrastructure and government assets from hacker attacks. The program, codenamed Omega, features a Defensive Information Sharing...

VMware View 3.1.3 addresses an important cross-site scripting vulnerability

VMware View 3.1.3 addresses an cross-site scripting vulnerability in VMware View. In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL. VMware would like to thank Alexey Sintsov from Digital Security Research Group DSecRG f...

AFP Server Share Enumeration (guest)

The remote AFP server allows guest users to connect to several shares. Make sure this is in line with your organization's security policy. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45380; scriptversion "$Revision: 1.3 $"; scriptnameenglish:"AFP Server Share...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (uncredentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (credentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Skype - URI Handler Input Validation

No description provided by source. Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Skype - URI Handler Input Validation

Skype - URI Handler Input Validation Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Skype URI Handler Input Validation

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Skype URI Handler Input Validation Versions affected: All versions prior to 4.2.0.1.55 v4.2 hotfix 1 +-----------+ |Description| +-----------+ The Windows...