7220 matches found
Debian Security Advisory DSA 1405-2 (zope-cmfplone)
The remote host is missing an update to zope-cmfplone announced via advisory DSA 1405-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Debian Security Advisory DSA 1405-1 (zope-cmfplone)
The remote host is missing an update to zope-cmfplone announced via advisory DSA 1405-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
ExpressionEngine 1.2.1 - HTTP Response Splitting Cross-Site Scripting
ExpressionEngine 1.2.1 - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/27128/info ExpressionEngine is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...
ExpressionEngine 1.2.1 - HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/27128/info ExpressionEngine is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
A peculiar hang horse way-vulnerability warning-the black bar safety net
I wrote this article is not to teach you how to run to hang horse Ah, hanging horse is not right! However, sometimes really want to do something make people feel happy things, because I came across a lot of administrators, you talk to him to convince the server has a problem! He does not believe,...
DSA-1439-1 typo3-src
Bulletin has no description...
[SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 1st, 2007 http://www.debian.org/security/faq -...
seamonkey security update
CentOS Errata and Security Advisory CESA-2007:1084 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...
DSA-1405-2 zope-cmfplone - arbitrary code
Bulletin has no description...
DSA-1405-1 zope-cmfplone - arbitrary code
Bulletin has no description...
Fedora 7 : firefox-2.0.0.4-1.fc7 (2007-0001)
Updated firefox packages that fix several security bugs are now available for Fedora Core 7. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed...
CentOS 4 / 5 : firefox (CESA-2007:0979)
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way i...
CentOS 3 / 4 : seamonkey (CESA-2007:0980)
Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...
firefox -- OnUnload Javascript browser entrapment vulnerability
RedHat reports: Several flaws were found in the way in which Firefox displayed malformed web content. A web page containing specially-crafted content could potentially trick a user into surrendering sensitive information. CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334...
WinSCP < 4.04 url protocol handler flaw
-Affected products: WinSCP 4.03 and older -Details: By default WinSCP installs url protocol handlers for the scp:// and sftp:// protocols. These could be used by malicious web content to automatically upload any file from the local system to a remote server, or automatically download files from a...
Microsoft XML Core Services SubstringData Integer Overflow Vulnerability
Description Microsoft XML Core Services is prone to an integer-overflow vulnerability because the application fails to ensure that integer values are not overrun. Attackers can exploit this issue by enticing unsuspecting users to view malicious web content. Specially crafted scripts could issue...
Microsoft XML Core Services 6.0 - SubstringData Integer Overflow
Microsoft XML Core Services 6.0 - SubstringData Integer Overflow source: https://www.securityfocus.com/bid/25301/info Microsoft XML Core Services is prone to an integer-overflow vulnerability because the application fails to ensure that integer values are not overrun. Attackers can exploit this...
Fedora Core 6 : thunderbird-1.5.0.12-1.fc6 (2007-550)
Updated thunderbird packages that fix several security bugs are now available for Fedora Core. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way...
Fedora Core 5 : devhelp-0.11-7.fc5 / epiphany-2.14.3-6.fc5 / seamonkey-1.0.9-1.fc5 / etc (2007-552)
Updated seamonkey packages that fix several security bugs are now available for Fedora Core 5. This update has been rated as having critical security impact by the Fedora Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTM...