Did you mean
security vulnerability (88 results), WMF vulnerability (25 results), vulnerability assessment (16 results), cross-site scripting vulnerability (5 results), Windows vulnerability (2 results)
Sponsored White Papers, Webcasts, and Downloads
ZDNet Dictionary Definition
- Vulnerability
- A security exposure in an operating system or other system software or application software component. Before the Internet became mainstream and exposed every organization in the world to every...
- Full Vulnerability Definition >>
ZDNet Resources
- sort by:
- Relevance
- Date
- Popularity
- Protocol handlers cause Mozilla Firefox 3 remote command execution vulnerabilities
- Update 07/16/2008: Apparently I neglected to mention that this has been patched already. Reading over it again and a heads up from a reader pointed out the error to me. As always, great job by Window Snyder and the Mozilla Security Team for getting this patched quickly. ...
- Blog posts 2008-07-16
- Ounce Labs finds 2 security vulnerabilities in Spring framework
- Code inspector Ounce Labs has identified two vulnerabilities in the open source Spring framework that exposes their enterprise applications to would-be hackers and hijackers. The two issues, ModelView Injection and Data Submission to Non-Editable Fields, affect only the MVC module of the Spring framework, which is used to...
- Blog posts 2008-07-16
- Symantec says Microsoft Access ActiveX attacks to increase
- Symantec has reported that the Neosploit toolkit has been updated to include attack vectors for the recent Microsoft Access ActiveX vulnerability. Neosploit is a toolkit for sale on the market (price estimates fall between $1500-$3000) that seeks to automate and extend the capability of browser exploits. Symantec...
- Blog posts 2008-07-14
- XSS worm at Justin.tv infects 2,525 profiles
- A XSS worm was crawling across Justin.tv, the popular lifecasting platform at the end of June, details of the incident emerged in the middle of last week. Basically, the group that found the XSS vulnerability abused it for the purpose of generating the following graph as a proof of concept,...
- Blog posts 2008-07-14
- On deck from Oracle: 45 critical database, server patches
- Database server giant Oracle plans to ship patches for a total of 45 security vulnerabilities on Thursday (July 17), bringing the vulnerability count for 2008 to a whopping 112. Since January 2006 this CPU included, Oracle has shipped fixes for a total of 572 vulnerabilities. ...
- Blog posts 2008-07-14
- Late breaking news: Microsoft investigates reports of Office Word 2002 SP 3 exploited in the wild
- From Bill Sisk, security response communications manager for Microsoft: Microsoft Security Advisory (953635) Vulnerability in Microsoft Word Could Allow Remote Code Execution Published: July 8, 2008 Microsoft is investigating new public reports of a possible vulnerability in Microsoft Office Word 2002 Service Pack 3....
- Blog posts 2008-07-08
- Microsoft addresses 9 security vulnerabilities with 4 "Important" bulletins
- Microsoft announced 4 "Important" security bulletins today that cover 9 separate vulnerabilities. Of note were vulnerabilities reported in Windows DNS server and client, and within SQL Server. Briefly, the vulnerabilities involve: Cache poisoning and insufficient socket entropy flaws in Microsoft DNS Server A remote...
- Blog posts 2008-07-08
- Microsoft delivers 'important' patches
- Microsoft on Tuesday delivered nine important patches to fix vulnerabilities in SQL Server, Exchange Server, Vista and Windows Server. Among the details, which were previewed last week. CVE-2008-0085: A vulnerability in the way SQL Server manages memory page reuse. An attacker with database operator...
- Blog posts 2008-07-08
- Approximately 800 vulnerabilities discovered in antivirus products
- Approximately 800 vulnerabilities discovered in antivirus productsNo matter what you do---You'll never get rid of virus.This could even be a threat to the United Nations.Oh the Humanity!ntYou know it's pretty bad when AV vulnerabilities are found......by [url=http://secunia.com/advisories/19284/]hacks like me[/url].RE: Approximately 800 vulnerabilities discovered in antivirus productsParsing error can occur in...
- Discussion threads 2008-07-07
- Approximately 800 vulnerabilities discovered in antivirus products
- In what appears to be either a common scenario of "when the security solution ends up the security problem itself", or a product launch basing its strategy on outlining the increasing number of critical vulnerabilities found in competing antivirus products, the IT/Security consulting firm n.runs AG claims to have discovered...
- Blog posts 2008-07-07
- Microsoft warns of "active, targeted" ActiveX control attacks
- Microsoft has issued a pre-patch security advisory to warn about "active, targeted attacks" against an ActiveX control for the Snapshot Viewer for Microsoft Access. The skinny: An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page,...
- Blog posts 2008-07-07
- Multiple Facebook vulnerabilities reported on Full-Disclosure
- Jouko Pynnonen posted a message to the Full-Disclosure mailing list today, citing multiple "script injection" vulnerabilities within Facebook. I'm not sure if this is a surprise to anybody out there, it's certainly not to me, as numerous web applications have major problems with Cross-site Scripting vulnerabilities, but I think this...
- Blog posts 2008-07-02
- Remote code execution flaw in VLC Media Player
- Researchers at Secunia have found a "highly critical" vulnerability that puts users of the cross-platform VLC Media Player at risk of remote code execution attacks. The vulnerability is confirmed in version 0.8.6h on Windows. Prior versions may also be affected. A patch is expected soon from...
- Blog posts 2008-07-02
- Apple plugs 25 Mac OS X security vulnerabilities
- Apple plugs 25 Mac OS X security vulnerabilitiesAnother 25?Wow, how come people are finding so many holes in OS X? Has anything changed? There never used to be so many security vulnerabilities in OS X or could it simply be that they've [b]always[/b] been there and they've simply never been...
- Discussion threads 2008-06-30
- Exploit code released for unpatched IE 7 vulnerability
- Exploit code released for unpatched IE 7 vulnerabilityYour picture looks like Google hacked MicrosoftGoogle pages enter unannounced.Can this happen if another window isn't open?or a tab?There has to be somebody looking at the doc model, right?So if one uses IE one window, one website at a time, is this safe?I...
- Discussion threads 2008-06-30
- Exploit code released for unpatched IE 7 vulnerability
- Another day, another gaping hole affecting fully patched versions of Microsoft's Internet Explorer browser. According to a warning from US-CERT, proof-of-concept exploit code has been published for a new zero-day bug that can be used for a variety of malicious attacks against Windows users running IE 6,...
- Blog posts 2008-06-30
- HSBC sites vulnerable to XSS flaws, could aid phishing attacks
- What would the perfect phishing attack from a social engineering perspective? The one that compared to using typosquatted domains impersonating the bank's web application directory structure is in fact using the bank's legitimate domain names as redirectors due to XSS flaws within. It's even more interesting to measure the average...
- Blog posts 2008-06-29
- An effective way to treat Web 2.0 vulnerabilities
- An effective way to treat Web 2.0 vulnerabilitiesIt does work!Hi Nate,I couldn't agree more! We changed our approach to application security around 1 year ago and one of the core changes was that security is as much of a defect as a functional issue. It really has made a world...
- Discussion threads 2008-06-29
- An effective way to treat Web 2.0 vulnerabilities
- I'm personally a huge fan of the Matasano blog, and have a lot of respect for their group. I took a peek over at their blog today and noticed an article by Dave Goldsmith that deals with "Vulnerability Reporting in a Web 2.0 World Continued". In this...
- Blog posts 2008-06-28
- Zero-day flaw haunts Internet Explorer
- Zero-day flaw haunts Internet ExplorerJelloWow, Ryan, that really tells me a lot. What does this vulnerability do? Change my hard drive into Jello?While the information is appreciatedit would have been nice if the headline had included that little number 6. It makes a huge difference.this flaw haunts only OLD Internet...
- Discussion threads 2008-06-26
- << Previous
- page 1 of 25
- Next >>
Content Types
- Blog posts (244 results)
- Book chapters (2 results)
- Case studies (4 results)
- Discussion threads (134 results)
- Download resources (1 results)
- Image galleries (3 results)
- Presentations (2 results)
- Software downloads (38 results)
- Training (1 results)
- Videos (1 results)
- Webcasts (6 results)
- White papers (51 results)
Refining Tags
- Security (425 results)
- Microsoft Corp. (263 results)
- flaw (173 results)
- Microsoft Windows (159 results)
- Software (127 results)
- Ryan Naraine (88 results)
- Microsoft Internet Explorer (76 results)
- patch management (53 results)
- Apple Macintosh (51 results)
- Viruses And Worms (50 results)
- Microsoft (50 results)
- Attack (49 results)
- Internet (48 results)
- Larry Dignan (47 results)
- Operating Systems (44 results)
- Mozilla Firefox (44 results)
- Microsoft Office (43 results)
- Attacker (38 results)
- Exploit code (38 results)
- Apple Mac OS X (36 results)
- Browsers (36 results)
- Vulnerability research (36 results)
- Data theft (35 results)
- Responsible disclosure (35 results)
- Patch Watch (35 results)
- Cisco Systems Inc. (35 results)
- Apple Inc. (34 results)
- Hackers (34 results)
- Microsoft Windows Vista (33 results)
- Apple Mac OS (32 results)
- Zero-day attacks (32 results)
- Mozilla Corp. (32 results)
- Pen testing (32 results)
- Web Browser (31 results)
- Web (30 results)
- Open Source (29 results)
- Server (29 results)
- Botnets (29 results)
- George Ou (28 results)
- Linux (28 results)
- Apple Computer Inc. (26 results)
- Hardware (24 results)
- Office Suites (24 results)
- Web Browsers (23 results)
- Spam And Phishing (23 results)
- Symantec Corp. (22 results)
- Flaws (22 results)
- exploit (22 results)
- operating system (22 results)
- Secunia (21 results)
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Leading Virtualization Performance
-
Read how the Intel® Xeon® processors perform on VMware ESX* Servers and why they are the best choice for virtualization, providing energy efficient performance. IT can now respond more quickly and get more done throughout the day.
- View the benchmarks >>
- Marc Canter: The master of multimedia speaks
-
In this Super Techies interview, larger-than-life techie Marc Canter talks with ZDNet's Editor in Chief Dan Farber about his career as a multimedia pioneer.
- Watch the video >>
- Learn how collaboration fuels success with this FREE Economist report
-
According to a new study from the Economist, future success belongs to those who collaborate effectively. Learn how successful collaboration can improve profits, problem-solving, and competitive differentiation.
- Visit Cisco's Collaboration Resource Center today!
- BNET Industries
- Check out BNET's newest resource for managers and executives. Need to do research on your competitors? Don't have time to read every trade pub? BNET Industries is the new source for daily news, insights, and research on 11 major industries and 9,000 public companies.
-
- The technology industry from a different angle
-
- See what's hot in the auto industry
-
- Stay on top of the energy industry
