弱點週報 - 2011/7/22

  • 1429
  • 0

本週更新弱點
平台 數量
第三方 Windows 應用程式 3
Linux 1
Solaris 1
跨平台 14
Web 應用程式 - SQL Injection 2
Web 應用程式 4
網路裝置 1
硬體 1

本週更新弱點

平台 數量
第三方 Windows 應用程式 3
Linux 1
Solaris 1
跨平台 14
Web 應用程式 - SQL Injection 2
Web 應用程式 4
網路裝置 1
硬體 1

第三方 Windows 應用程式

  1. Citrix Access Gateway Plug-in ActiveX Control Multiple Unspecified Vulnerabilities
  2. Dell OpenManage IT Assistant Information Disclosure
  3. Google Picasa JPEG Image Processing Remote Code Execution Vulnerability

Linux

  1. JBoss Seam Expression Language Remote Code Execution Vulnerability

Solaris

  1. Oracle Sun Solaris Multiple Vulnerabilities

跨平台

  1. BlackBerry Enterprise Server Administration API Information Disclosure Vulnerability
  2. VLC Media Player ".RM" and ".AVI" Files Multiple Remote Heap Buffer Overflow Vulnerabilities
  3. Check Point Provider-1 Unspecified Local Security Vulnerability
  4. Apache Tomcat "sendfile" Request Attributes Information Disclosure
  5. Foomatic "foomatic-rip" Command Injection Vulnerability
  6. Mozilla Firefox and Thunderbird CRLF Injection Vulnerability
  7. IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
  8. Fglrx "xauth secret" Cookie Information Disclosure
  9. Oracle Enterprise Manager Grid Control Multiple Vulnerabilities
  10. Oracle Application Server XML Developer Kit  Remote Security Vulnerability
  11. Oracle Fusion Middleware Multiple Vulnerabilities
  12. Oracle VM VirtualBox Multiple Local Vulnerabilities
  13. Oracle Database Server Multiple Vulnerabilities
  14. Oracle PeopleSoft  Multiple Vulnerabilities

Web 應用程式 - SQL Injection

  1. LiteRadius "locator.php" Multiple SQL Injection Vulnerabilities
  2. MapServer Multiple SQL Injection Vulnerabilities

Web 應用程式

  1. Trend Micro Control Manager "module" Parameter Directory Traversal Vulnerability
  2. Chyrp Multiple Input Validation Vulnerabilities
  3. EMC Documentum eRoom Indexing Server HummingBird Connector Remote Buffer Overflow Vulnerability
  4. Support Incident Tracker Multiple Unspecified Vulnerabilities

網路裝置

  1. Iskratel SI2000 Callisto 821+ Multiple Security Vulnerabilities

硬體

  1. HP Arcsight Connector Appliance Cross-Site Scripting Vulnerability