CentOS 5 : gnome-vfs2 (CESA-2013:0131)

Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : gnome-vfs2 on SL5.x i386/x86_64 (20130108)

A denial of service flaw was found in the neon Extensible Markup Language XML parser. Visiting a malicious DAV server with an application using gnome-vfs2 such as Nautilus could possibly cause the application to consume an excessive amount of CPU and memory. CVE-2009-2473 This update also fixes t...

RedHat Update for gnome-vfs2 RHSA-2013:0131-01

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test RedHat Update for gnome-vfs2 RHSA-2013:0131-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

gnome security update

CentOS Errata and Security Advisory CESA-2013:0131 Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring Syst...

Low: Red Hat Security Advisory: gnome-vfs2 security and bug fix update

Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 5 : gnome-vfs2 (RHSA-2013:0131)

Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Spoofing

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string...

Code injection

Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /internal substring...

CVE-2012-6432

Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /internal substring...

Opera Web Browser重复站点访问地址栏URI伪造漏洞

Bugtraq ID:56984 Opera Web Browser是一款开源的WEB浏览器。 通过连续快速重复请求加载目标站点，可导致Opera不正确显示地址栏，攻击者可以构建恶意WEB页，诱使用户解析，欺骗目标用户，进行钓鱼等攻击。 0 Opera Web Browser 12.12之前版本 厂商解决方案 Opera Web Browser 12.12已经修复此漏洞，建议用户下载使用： http://www.opera.com...

Elite Bulletin Board 2.1.21 SQL Injection Vulnerability

Elite Bulletin Board version 2.1.21 suffers from multiple remote SQL injection vulnerabilities. Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public...

CVE-2012-4991

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to 1 read, 2 delete, or 3 create files, or 4 list directories, via a ..%5C encoded dot dot backslash in a URI...

CVE-2012-6301

The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted market: URI in the SRC attribute of an IFRAME element...

Input validation

The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted market: URI in the SRC attribute of an IFRAME element...

CVE-2012-6301

The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted market: URI in the SRC attribute of an IFRAME element...

Microsoft Internet Explorer 7 memory corruption

Memory corruption on redirection to data: uri containing some tags...

DIMIN Viewer 5.4.0 WriteAV Arbitrary Code Execution

!/usr/bin/perl DIMIN Viewer 5.4.0 Vendor URI: http://www.dimin.net Vendor Decription: View images in countless formats, and apply a variety of effects with this small, fast, and powerful application. Dimin Viewer incorporates unique visualization ideas, like Panoramic Photographs Tool and Big Ima...

CVE-2012-3297

Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2012-3297

Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...