4180 matches found
tomcat: large number of parameters DoS
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service CPU consumption via a request that contains many parameters and parameter values, a different vulnerability...
Javascript escape the value of "dark features" within the javascript context they are rendered out in
Current user specific dark feature values are not javascript escaped in the javascript context they exist in. e.g. the value "' + evalalert1 ' +" without the double quotes appears like the following in the feature javascript context: / Dark features are features that can enabled and disabled per...
Javascript escape the value of "dark features" within the javascript context they are rendered out in
Current user specific dark feature values are not javascript escaped in the javascript context they exist in. e.g. the value "' + evalalert1 ' +" without the double quotes appears like the following in the feature javascript context: / Dark features are features that can enabled and disabled per...
[SECURITY] [DSA 2454-1] openssl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2454-1 [email protected] http://www.debian.org/security/ Raphael Geissert April 19, 2012 http://www.debian.org/security/faq -...
Fedora 17 : pidgin-2.10.2-1.fc17 (2012-4650)
version 2.10.2 03/14/2012 View all closed tickets for this release. General: Fix compilation when using binutils 2.22 and new GDK pixbuf. 14799 Fix compilation of the MXit protocol plugin with GLib 2.31. 14773 Pidgin: Add support for the GNOME3 Network dialog. 13882 Fix rare crash. 14392 Add...
Fedora 16 : pidgin-2.10.2-1.fc16 (2012-4595)
version 2.10.2 03/14/2012 View all closed tickets for this release. General: Fix compilation when using binutils 2.22 and new GDK pixbuf. 14799 Fix compilation of the MXit protocol plugin with GLib 2.31. 14773 Pidgin: Add support for the GNOME3 Network dialog. 13882 Fix rare crash. 14392 Add...
Design/Logic Flaw
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03...
Design/Logic Flaw
The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location...
Design/Logic Flaw
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus...
CVE-2012-1434
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequen...
Debian: Security Advisory (DSA-2411-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...
[SECURITY] [DSA 2416-1] notmuch security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2417-1] libxml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2417-1 [email protected] http://www.debian.org/security/ Nico Golde February 22, 2012 http://www.debian.org/security/faq -...
DSA-2411-1 mumble - information disclosure
Bulletin has no description...
Unfixed XSS vulnerability at jogjacamp.org
Security researcher xwungu, has submitted on 17/02/2012 a cross-site-scripting XSS vulnerability affecting jogjacamp.org, which at the time of submission ranked 398931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...
[SECURITY] [DSA 2409-1] devscripts security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2409-1 [email protected] http://www.debian.org/security/ Raphael Geissert February 15, 2012 http://www.debian.org/security/faq -...
Unfixed XSS vulnerability at hopla.fr
Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting hopla.fr, which at the time of submission ranked 2133983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is current...
Total Defense Suite UNC Management Web Service Database Credentials Disclosure Vulnerability
This vulnerability allows attackers to remotely obtain domain credentials on vulnerable installations of CA Total Defense Suite UNC Management Web Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AppCode.dll service listening by default on...
[SECURITY] [DSA 2400-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2400-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 02, 2012 http://www.debian.org/security/faq -...