7614 matches found
CVE-2007-3728: Undefined Security Weakness
Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...
SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞
BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...
CVE-2007-2784
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...
Code injection
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...
CVE-2007-2784
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...
CVE-2007-2784
CVE-2007-2784 describes an unspecified vulnerability in the globus-job-manager component of the Globus Toolkit 4.1.1 and earlier (also affecting globus_nexus-6.6 and earlier ). The issue allows remote attackers to cause a denial of service through certain requests to temporary TCP ports used by a...
CVE-2007-2784: Undefined Security Weakness
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...
Solaris 10 (sparc) : 125672-01
The remote host is missing Sun Security Patch number 125672-01 patch Solaris Security Toolkit 4.2 for LDOMS 1.0. Date this patch was last updated by Sun : Tue May 08 02:51:20 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...
Solaris 9 (i386) : 125672-01
The remote host is missing Sun Security Patch number 125672-01 patch Solaris Security Toolkit 4.2 for LDOMS 1.0. Date this patch was last updated by Sun : Tue May 08 02:51:20 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...
Solaris 10 (i386) : 125672-01
The remote host is missing Sun Security Patch number 125672-01 patch Solaris Security Toolkit 4.2 for LDOMS 1.0. Date this patch was last updated by Sun : Tue May 08 02:51:20 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...
CVE-2007-2378
The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...
Design/Logic Flaw
The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...
CVE-2007-2378
The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...
CVE-2007-2378
The CVE-2007-2378 issue concerns the Google Web Toolkit (GWT) framework, where JSON data is exchanged without a protection scheme, enabling JavaScript Hijacking. IBM’s bulletin specifies ITNM (IBM Tivoli Network Manager) IP Edition 4.2 GA through 4.2.0.15 is affected, with a fix in ITNM 4.2 Fix P...
PT-2007-3711 · Google · Google Web Toolkit
Name of the Vulnerable Software and Affected Versions: Google Web Toolkit GWT affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This can be achieved...
CVE-2007-2378: Undefined Security Weakness
The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...
CentOS 4 : gtk2 (CESA-2007:0019)
Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...
RHEL 4 : gtk2 (RHSA-2007:0019)
Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...
