Moderate: Red Hat Security Advisory: xen security and bug fix update

Updated xen packages that fix a security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Xen is an open source virtualization framework. Virtualization allows users to ru...

Adobe Flash Patch Guidance Working, Kinda

Mozilla’s move to nudge Firefox users into updating the browser’s Flash Player plug-in has been a phenomenal success with about 10 million users clicking through to the Web page with Adobe’s patch. Mozilla released some brief statistics to track the success of its new program, which serves up a...

OXID eShop Community Edition Unauthorized Write Access Vulnerability

This host is installed with OXID eShop Community Edition and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthwritevuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Write Access Vulnerability Authors: Nikita M...

CVE-2009-3003: Undefined Security Weakness

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...

OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error

Application: OpenCms Version: 7.5.0 Hardware: Tomcat/Oracle Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error Overview: Various URL's within the deployed OpenCms application version 7.5.0 are open to attacks, including Cross-Site Scripting, Phishing Through Frames an...

PT-2009-4379 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4 through 8 Description: The issue arises from the improper handling of attempts to access deleted objects in memory, allowing remote attackers to execute arbitrary code via an HTML document...

Wireshark Infiniband Dissector Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkinfinibanddosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark Infiniband Dissector Denial of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyrigh...

Wireshark AFS Dissector Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkafsdosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark AFS Dissector Denial of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 SecPo...

The use of the picture behind a link hidden hung it.-vulnerability warning-the black bar safety net

I also don't know dove gray is what the time, the mesh horse is very popular, and when I finally know the Dove gray is what time, Pirates of the QQ software in the use of the mailbox the received the letter, and when I use dove gray successful on-line and caught the first broilers of the time, th...

MDVA-2009:006 : xen

The xen package released in Mandriva Linux 2009.0 lacks udev rules for handling hotplug events. As a result trying to create an HVM host will fail with this kind of error message: 'Error: Device 0 vif could not be connected Hotplug scripts not working'. Additionaly, it also add PCI pass-through...

CVE-2009-0477: Undefined Security Weakness

Unspecified vulnerability in the process aka proc filesystem in Sun OpenSolaris snv85 through snv100 allows local users to gain privileges via vectors related to the contract filesystem...

CVE-2009-0072: Undefined Security Weakness

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service application crash via an onload=screen"" attribute value in a BODY element...

[ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+

============================================= INTERNET SECURITY AUDITORS ALERT 2007-002 - Original release date: 31st January, 2007 - Last revised: 22th December, 2008 - Discovered by: Daniel Fernandez Bleda - Severity: 5/5 ============================================= I. VULNERABILITY...

Canna irw_through Buffer Overflow Vulnerability

Overview Canna contains a buffer overflow vulnerability in the irwthrough function. Impact A local attacker could execute arbitrary code with the privileges of the 'bin' user. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate action...

PT-2008-2739 · Ruby +1 · Ruby +1

Name of the Vulnerable Software and Affected Versions: Ruby versions 1.8 before 1.8.5-p115 Ruby versions 1.8.6 before 1.8.6-p114 Ruby versions 1.9 through 1.9.0-1 Description: A directory traversal issue exists when running on systems that support backslash path separators or case-insensitive fil...

CVE-2008-0910: Undefined Security Weakness

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted RAR archive. NOTE: this might be related to CVE-2008-0792...

CVE-2008-0075: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Internet Information Services IIS 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages...

CVE-2008-0074: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Information Services IIS 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders...

CVE-2007-2502: Undefined Security Weakness

Unspecified vulnerability in HP ProCurve 9300m Series switches with software 08.0.01c through 08.0.01j allows remote attackers to cause a denial of service via unknown vectors, a different switch series than CVE-2006-4015...

CVE-2007-1223: Undefined Security Weakness

Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service responder control processing halt by sending "data unexpectedly through the port"...