1113 matches found
Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19442
Check for the Version of php-symfony2-HttpFoundation OpenVAS Vulnerability Test Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19442 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
[SECURITY] Fedora 18 Update: php-symfony2-HttpFoundation-2.1.4-1.fc18
The HttpFoundation Component defines an object-oriented layer for the HTTP specification. In PHP, the request is represented by some global variables $GET, $POST, $FILE, $COOKIE, $SESSION... and the response is generated by some funct ions echo, header, setcookie, .... The Symfony2 HttpFoundation...
Webwork direct method invocation can bypass validatingStack through Action aliases
WebWork supports the concept of action aliases, which allow a single action class to serve requests mapping to different names. This allows a developer to reuse the same action logic, but provide different results based on interceptors. When an action is invoked, Webwork will typically call its...
Fedora Update for bcfg2 FEDORA-2012-10402
Check for the Version of bcfg2 OpenVAS Vulnerability Test Fedora Update for bcfg2 FEDORA-2012-10402 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
[SECURITY] Fedora 16 Update: bcfg2-1.2.3-1.fc16
Bcfg2 helps system administrators produce a consistent, reproducible, and verifiable description of their environment, and offers visualization and reporting tools to aid in day-to-day administrative tasks. It is the fifth generation of configuration management tools developed in the Mathematics...
Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)
According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...
USN-1611-1: Thunderbird vulnerabilities
Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the...
Scientific Linux Security Update : glibc on SL4.x i386/x86_64 (20120213)
The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly. An integer overflow flaw, leading to a heap-based buffer...
Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20120315)
The glibc packages provide the standard C and standard math libraries used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. An integer overflow flaw was found in the implementation of the printf functions family. This could allow an attacker...
CentOS Update for glibc CESA-2012:0393 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for glibc CESA-2011:0412 centos5 x86_64
Check for the Version of glibc OpenVAS Vulnerability Test CentOS Update for glibc CESA-2011:0412 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
[SECURITY] Fedora 16 Update: puppet-2.6.17-2.fc16
Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...
Senate Committee to Discuss Do Not Track at Key Hearing
The dram surrounding the Do Not Track specification and its implementation by browser manufacturers is set to continue on Thursday when the Senate Commerce Committee will hold a hearing to discuss whether the proposed specification is strong enough or has been weakened by the digital advertising...
Moderate: Red Hat Security Advisory: jbossas security update
An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which give...
libpng png_inflate Buffer Overflow (CVE-2011-3045)
An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification...
libpng png_decompress_chunk Integer Overflow (CVE-2011-3026)
An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification...
libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)
An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification. The vulnerability is due to a heap allocation in the function pngdecompresschunk. Remote attackers could exploit this vulnerability by sending a specially crafted PNG file to the...
[SECURITY] Fedora 17 Update: puppet-2.7.13-1.fc17
Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...
[SECURITY] Fedora 17 Update: perl-YAML-LibYAML-0.38-2.fc17
Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was original ly bound to Python and was later bound to Ruby...
Fedora Update for perl-YAML-LibYAML FEDORA-2012-5035
Check for the Version of perl-YAML-LibYAML OpenVAS Vulnerability Test Fedora Update for perl-YAML-LibYAML FEDORA-2012-5035 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...