CVE-2007-2378

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

CVE-2007-2378

The CVE-2007-2378 issue concerns the Google Web Toolkit (GWT) framework, where JSON data is exchanged without a protection scheme, enabling JavaScript Hijacking. IBM’s bulletin specifies ITNM (IBM Tivoli Network Manager) IP Edition 4.2 GA through 4.2.0.15 is affected, with a fix in ITNM 4.2 Fix P...

PT-2007-3711 · Google · Google Web Toolkit

Name of the Vulnerable Software and Affected Versions: Google Web Toolkit GWT affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This can be achieved...

CentOS 4 : gtk2 (CESA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

RHEL 4 : gtk2 (RHSA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

DEBIAN-CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

Through the different structure of the firewall to the back door of the place-vulnerability warning-the black bar safety net

This article describes the different configuration of the firewall is placed back door. Anyway, this article can tell you in other environments, the hackers is how to hide them into a system. Hackers always want to retain into their already compromised capacity of the system, even if the target...

Solaris 8 (sparc) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

Solaris 9 (i386) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

Solaris 10 (sparc) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

Solaris 2.6 (i386) : 104273-13

The remote host is missing Sun Security Patch number 104273-13 Solstice X.400 9.0 Client Toolkit Patchx86. Date this patch was last updated by Sun : Thu Nov 17 06:26:41 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 2.5.1 (i386) : 104273-13

The remote host is missing Sun Security Patch number 104273-13 Solstice X.400 9.0 Client Toolkit Patchx86. Date this patch was last updated by Sun : Thu Nov 17 06:26:41 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Moderate: Red Hat Security Advisory: qt security update

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

Debian DSA-942-1 : albatross - design error

A design error has been discovered in the Albatross web application toolkit that causes user-supplied data to be used as part of template execution and hence arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security/ http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.021 28-Sep-2006 Package: openssl Vulnerability: denial of service OpenPKG Specific: ...

CVE-2006-5067

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...

PT-2006-5806 · Php · Phpsatk

Name of the Vulnerable Software and Affected Versions: PHP System Administration Toolkit PHPSaTK affected versions not specified Description: A remote file inclusion issue in the loader.php file of PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the config parameter of...

CVE-2006-5067

PHPSaTK (PHP System Administration Toolkit) is affected by a remote file inclusion issue in loader.php via a URL in GLOBALS[config], allowing arbitrary PHP code execution. Affected component is loader.php in PHPSaTK; root cause is RFI through GLOBALS[config], as described in multiple sources. Som...

CVE-2006-5067

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...