Cross site scripting

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

Code injection

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The CVE-2008-7095 entry affects ArubaOS 3.3.2.6 on Aruba Mobility Controller, where the SNMP daemon does not restrict SNMP access. This allows remote attackers to read SNMP data: (1) all community strings via SNMP-COMMUNITY-MIB::snmpCommunityName or vacmGroupName via SNMP-VIEW-BASED-ACM-MIB with ...

RHEL 4 : kernel (RHSA-2009:1211)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Epiri Professional Web Browser 3.0 - Remote Crash

Epiri Professional Web Browser 3.0 - Remote Crash ' Title: Epiri Professional Web Browser 3.0 Remote Crash Exploit ' Vendor: Horizon ' Product Web Page: http://www.horizonum.com/ ' Current Version: 3.0.0.00 ' Notiz: Microsoft Silverlight ' Vulnerable Mode: Browse Internet ' Tested On Microsoft...

tomcat5 security update

CentOS Errata and Security Advisory CESA-2009:1164 Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container...

python: Multiple buffer overflows in unicode processing

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...

[oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection

2009-010 mimeTeX and mathTeX buffer overflows and command injection Description: The mimeTeX and mathTeX CGIs are widely used helper executables that allow mathematical equation rendering in the form of images. Both applications suffer from several buffer overflows as well as command injection...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

PT-2009-4831 · Scmpx · Scmpx

Name of the Vulnerable Software and Affected Versions: SCMPX version 1.5.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code via a long string in a .m3u playlist file. Recommendations: For SCMPX version 1.5.1,...

RedHat Security Advisory RHSA-2009:1106

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1106. Security fixes: several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Debian DSA-1813-1 : evolution-data-server - Several vulnerabilities

Several vulnerabilities have been found in evolution-data-server, the database backend server for the evolution groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0587 It was discovered that evolution-data-server is prone to integer...

[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1813-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 08, 2009 http://www.debian.org/security/faq -...