174 matches found
Oracle Releases Sun Java SE 1.6.0_20
Oracle has released Sun Java SE 1.6.020 to address several vulnerabilities. The release notes for this version of Java SE indicate that these vulnerabilities are in Java Deployment Toolkit and the new Java Plug-in. Exploitation of these vulnerabilities may allow a remote, unauthenticated attacker...
JP1/Cm2/Network Node Manager Denial of Service Vulnerability
Overview The JP1/Cm2/Network Node Manager NNM has vulnerability that can be exploited to cause a denial of service DoS. Impact A remote attacker could cause a denial of service DoS. Solution Please refer to the 'Vendor Information' section for the recommended workaround...
PostgreSQL privilege escalation via dblink
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...
tomcat XSS in example webapps
Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...
DEBIAN-CVE-2006-5794
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging...
US-CERT Technical Cyber Security Alert TA06-167A -- Microsoft Excel Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-167A Microsoft Excel Vulnerability Original release date: June 16, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Excel 2003 Microsoft Excel XP 2002 Microsoft Excel for...
US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...
Avast Linux Home Edition (vulnerability on a temporary folder creation)
Title : Avast Linux Home Edition, vulnerability on a temporary folder creation Protuct : Avast! Linux Home Edition Product : http://www.avast.com/eng/download-avast-for-linux-edition.html Version : 1.0.5, 1.0.5-1 avast4workstation-1.0.5-1.i586.rpm avast4workstation-1.0.5.tar.gz Vuln Found :...
Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: = 1.5 free/commercial Homepage: http://www.stadtaus.com/ Author: Filip Groszynski VXSfx Date: 4 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in...
[Full-Disclosure] IRIX Update Some Network Drivers May Leak Data
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Some Network Drivers May Leak Data Number : 20030601-01-I Date : April 2, 2004 Reference: CERT Vulnerability Note VU412115 Reference: CVE CAN-2003-0001 Reference: SGI BUG 878043 SGI provides this information freely to the SGI user...
PT-1994-1006 · Ibm · Aix
Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue allows local users to gain root access due to a problem with AIX Licensed Program Product performance tools. Recommendations: At the moment, there is no information about a newer...
