Fedora 13 : java-1.6.0-openjdk-1.6.0.0-50.1.8.7.fc13 (2011-1631)

This update fixes the following security issues : S6378709, CVE-2010-4465: AWT event dispatch does not support framework code S6854912, CVE-2010-4465: Security issue with the clipboard access in Applets S6878713, CVE-2010-4469: Verifier heap corruption, relating to backward jsrs S6907662,...

Fedora 14 : java-1.6.0-openjdk-1.6.0.0-52.1.9.7.fc14 (2011-1645)

This update fixes the following security issues : S6378709, CVE-2010-4465: AWT event dispatch does not support framework code S6854912, CVE-2010-4465: Security issue with the clipboard access in Applets S6878713, CVE-2010-4469: Verifier heap corruption, relating to backward jsrs S6907662,...

Adobe SVG Viewer Circle Transform Remote Code Execution

The version of Adobe SVG Viewer on the remote host has a remote code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted web page, resulting in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2010-2422

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

CVE-2010-2422

CVE-2010-2422 describes a Cross-site scripting (XSS) vulnerability in PortalTransforms’ safe_html transform in Plone versions 2.1 through 3.3.4, fixed by hotfix 20100612. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the safe_html transform. Exploitation ...

RPM Select/Elite 5.0 Buffer Overflow

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

RPM Select/Elite 5.0 - '.xml Configuration parsing' Unicode Buffer Overflow (PoC)

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

CentOS 4 / 5 : firefox (CESA-2009:0397)

Updated firefox packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

WebKit - 'Document()' Remote Information Disclosure

Below, you should see e-mail stolen cross-domain! alertdocument.body.innerHTML...

Citrix NetScaler和Access Gateway多个远程拒绝服务漏洞

BUGTRAQ ID: 36948 Citrix NetScaler是一款网络流量管理产品，Citrix Access Gateway是一款通用的SSL VPN设备。 远程攻击者可以利用Citrix NetScaler和Access Gateway等产品中所使用的URL Transform、Application Firewall和AGEE Clientless VPN功能中的安全漏洞导致拒绝服务。 Citrix Access Gateway 企业版9.1 Citrix Access Gateway 企业版9.0 Citrix NetScaler 9.1 Citrix NetScaler...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:0397 Updated firefox packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source W...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...

Fedora Core 10 FEDORA-2009-3100 (firefox)

The remote host is missing an update to firefox announced via advisory FEDORA-2009-3100. OpenVAS Vulnerability Test $Id: fcore20093100.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3100 firefox Authors: Thomas Reinke Copyright: Copyright c 2009...

CentOS 3 : seamonkey (CESA-2009:0398)

Updated SeaMonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Fedora 9 : Miro-2.0.3-2.fc9 / blam-1.8.5-7.fc9.1 / chmsee-1.0.1-10.fc9 / devhelp-0.19.1-10.fc9 / etc (2009-3099)

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially,...

RHEL 4 / 5 : firefox (RHSA-2009:0397)

Updated firefox packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

CVE-2009-1169

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an XML file with a crafted XSLT transform...