7461 matches found
firefox security update
CentOS Errata and Security Advisory CESA-2008:0549 An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source...
seamonkey security update
CentOS Errata and Security Advisory CESA-2008:0547 Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...
Critical: Red Hat Security Advisory: firefox security update
An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Multiple flaws were found in the...
Mozilla Firefox 3远程命令执行漏洞
BUGTRAQ ID: 29794 CVECAN ID: CVE-2008-2786 Firefox是一款流行的开放源码WEB浏览器。 远程攻击者可以利用最新版的Firefox 3处理恶意网页内容时的缓冲区溢出漏洞导致在浏览器会话中执行任意代码。 Mozilla Firefox 3.0 Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...
IBM AFP查看器插件SRC属性堆溢出漏洞
BUGTRAQ ID: 29932 IBM的AFP查看器插件允许用户在WEB浏览器中查看AFP文档。 AFP查看器插件在处理文档中的SRC属性时存在堆溢出漏洞，如果用户打开的文档包含有超过1023个字符的超长属性参数的话，就可以触发这个溢出，导致执行任意指令。 IBM AFP Viewer 3.2.1.1 IBM AFP Viewer 2.0.7.1 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
JVN#52363223: Cybozu Garoon vulnerable to arbitrary script execution
Cybozu Garoon, a groupware from Cybozu, contains a vulnerability that allows an attacker to execute an arbitrary script when a user views RSS feed. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the vendor...
IBM AFP Viewer Plug-in SRC Property Buffer Overflow
The Windows remote host contains IBM's AFP Viewer plug-in, which allows for viewing AFP Advanced Function Presentation documents from a web browser. The version of the plug-in installed on the remote host reportedly contains a heap-based buffer overflow that can be triggered when processing a 'SR...
JSCAPE Secure FTP Applet主机密钥验证绕过安全限制漏洞
BUGTRAQ ID: 29882 Secure FTP Applet是运行在WEB浏览器中的的FTP客户端组件。 Secure FTP Applet在处理数据连接时存在漏洞，在连接期间Applet没有正确地验证或显示主机密钥，这允许攻击者通过中间人攻击劫持会话，从而完全入侵FTP客户端。 JSCAPE Secure FTP Applet 4.8 JSCAPE ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jscape.com/sftpapplet/index.html...
Apple Safari自动启动可执行程序漏洞
BUGTRAQ ID: 29835 CVECAN ID: CVE-2008-2306 Safari是苹果家族操作系统中默认捆绑的WEB浏览器。 Safari处理信任站点的方式上存在漏洞，如果用户所访问的站点是Internet Explorer 7中“启动应用程序和不安全文件”设置为“启用”的站点，或Internet Explorer 6中“本地Intranet”或“可信任站点”区中的站点，则安装在Windows平台上的Safari就会自动启动从该站点所下载的可执行文件。 Apple Safari = 3.1.1 - Microsoft Windows XP SP3 - Microsoft...
US-CERT Technical Cyber Security Alert TA08-162C -- Apple Quicktime Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-162C Apple Quicktime Updates for Multiple Vulnerabilities Original release date: June 10, 2008 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X running versions of QuickTi...
Adobe Flash player code execution vulnerability
Overview Adobe Flash contains a vulnerability that may allow an attacker to run code on a system that has a vulnerable version of the Flash player installed. There are reports that this vulnerability is being actively exploited. Description The Adobe Flash Player is a player for the Flash media...
Vulnerability in multiple web browsers allowing request spoofing attacks
Overview Multiple web browsers contain a vulnerability in the processing of XmlHttpRequest objects. XmlHttpRequest objects available in JavaScript provide a function to communicate with a server without reloading a web page. In general, JavaScript only allows communication within the same domain ...
MitakeSearch cross-site scripting vulnerability
Overview MitakeSearch, a fulltext search system from Hewlett-Packard Japan, contains a cross-site scripting vulnerability due to improper validation of input character strings in the ranking CGI script file, ranking.pl. Impact A malicious script may be executed on the user's web browser. Solution...
pnamazu cross-site scripting vulnerability
Overview pnamazu, the Perl version program of the full-text search engine Namazu, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
TikiWiki cross-site scripting vulnerability
Overview TikiWiki, one of Wiki clones, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
Microsoft IE 7 DisableCachingOfSSLPages选项失效漏洞
BUGTRAQ ID: 29120 Internet Explorer是微软发行的非常流行的WEB浏览器。 管理员和用户可以在Internet Explorer中设置DisableCachingOfSSLPages选项以防止将私人数据保存到磁盘上，这个选项的注册表项为： HKCUSoftwareMicrosoftWindowsCurrentVersionInternetSettingsDisableCachingOfSSLPages 当启用了这个选项后，Internet Explorer 7仍会将启用了SSL的网页缓存到磁盘上，导致将私人或敏感数据写到磁盘。 Microsoft...
Debian Security Advisory DSA 1570-1 (kazehakase)
The remote host is missing an update to kazehakase announced via advisory DSA 1570-1. OpenVAS Vulnerability Test $Id: deb15701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1570-1 kazehakase Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1570-1 : kazehakase - various
Andrews Salomon reported that kazehakase, a GTK+-based web browser that allows pluggable rendering engines, contained an embedded copy of the PCRE library in its source tree which was compiled in and used in preference to the system-wide version of this library. The PCRE library has been updated ...
[ GLSA 200805-02 ] phpMyAdmin: Information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
