Stable Channel Update

The Stable channel has been updated to 28.0.1500.95 for Chrome Frame, Linux, Mac, and Windows. Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. This commonly occurs if the bug exists in a third party library that other projects similar...

VMSA-2013-0004 VMware ESXi security update for third party library

The remote ESXi is missing one or more security related Updates from VMSA-2013-0004. Relevant Releases ESXi 5.1 without patch ESXi510-201304101 ESXi 5.0 without patch ESXi500-201303101 ESXi 4.0 without patch ESXi400-201305001 ESXi 4.1 without patch ESXi410-201304401 Problem Description The ESXi...

VMware ESXi security update for third party library (VMSA-2013-0004)

The remote ESXi is missing one or more security related Updates from VMSA-2013-0004. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware ESXi and ESX security update for third party library

a. Update to ESX/ESXi libxml2 userworld and service console. The ESX/ESXi userworld libxml2 library has been updated to resolve a security issue. Also, the ESX service console libxml2 packages are updated to the following versions: The Common Vulnerabilities and Exposures project cve.mitre.org ha...

VMSA-2013-0004:VMware ESXi and ESX security update for third party library

VMSA-2013-0004.3 VMware ESXi and ESX security update for third party library VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0004.3 VMware Security Advisory Synopsis: VMware ESXi and ESX security update for third party library VMware Security Advisory Issue date: 2013-03-...

VMware ESXi/ESX address an NFC Protocol memory corruption and third party library security issues (VMSA-2013-0003)

The remote ESXi is missing one or more security related Updates from VMSA-2013-0003. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library security issues.

The remote ESXi is missing one or more security related Updates from VMSA-2013-0003. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0003.nasl 6065 2017-05-04 09:03:08Z teissa $ VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library securi...

Arbitrary resource file download in urlrewrite.xml

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-26888. panel There is an arbitrary resource file download vulnerability triggered by a third party library...

Arbitrary resource file download in urlrewrite.xml

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-26888. panel There is an arbitrary resource file download vulnerability triggered by a third party library...

VMSA-2012-0012 : VMware ESXi update to third-party library

a. ESXi update to third-party component libxml2 The libxml2 third-party library has been updated which addresses multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-4008, CVE-2011-0216, CVE-2011-1944, CVE-2011-2834, CVE-2011-390...

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. Summary VMware ESXi and ESX updates to third party library and ESX Service Console address several security issues. Relevant releases: ESXi 4.1 without patch ESXi410-201201401-SG ESXi 5.0 without patch...

VMware ESXi/ESX updates to third party library and ESX Service Console (VMSA-2012-0001)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0001 : VMware ESXi and ESX updates to third-party library and ESX Service Console

a. ESX third-party update for Service Console kernel The ESX Service Console Operating System COS kernel is updated to kernel-2.6.18-274.3.1.el5 to fix multiple security issues in the COS kernel. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2011-0726,...

VMSA-2009-0010:VMware Hosted products update libpng and Apache HTTP Server

VMSA-2009-0010.1 VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0010.1 VMware Security Advisory Synopsis: VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory Issue date: 2009-08-...

Lotus Notes buffer overflow in the Lotus WorkSheet file processor

Advisory ID Internal CORE-2007-0821 Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory ID: CORE-2007-0821 Date published: 2007-11-27 Date of last update: 2007-11-27 Vendors contacted: IBM Corp. Release mode: COORDINATED RELEASE Vulnerability...

CVE-2006-3978

The CVE-2006-3978 entry covers an unspecified vulnerability in a Verity third‑party library used by Adobe ColdFusion MX 7 through MX 7.0.2 (and possibly other products). The vulnerability is described as allowing local users to execute arbitrary code via unknown attack vectors, i.e., a local priv...

CPAINT AJAX Library Cross Site Scripting

GulfTech Security Research February 9, 2006 Vendor : CPAINT URL : http://sourceforge.net/projects/cpaint Version : CPAINT = 2.0.2 Risk : Cross Site Scripting Description: CPAINT Cross-Platform Asynchronous INterface Toolkit is a multi-language toolkit that helps web developers design and implemen...

CVE-2005-2384

CVE-2005-2384 describes a directory traversal in a third‑party compression library (UNACEV2.DLL) used by Avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460. The vulnerability allows a remote attacker to write arbitrary files by supplying an ACE archive with filenames co...

CVE-2005-2385

Buffer overflow in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename...

DUO-PSA-2019-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2019-002 CVE: CVE-2019-3465 Publication Date: 2019-11-12 Revision Date: 2019-11-12 Status: Confirmed, Fixed Document Revision: 1 Overview A third-party software library, which the Duo Access Gateway DAG uses to enable SAML as a first-factor...