Secunia - Stay Secure
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Secunia Highlights [About]



In Focus
Secunia NSI 2.0
Scan your network for vulnerabilities and missing security patches in third party applications.

Download your copy of the Secunia NSI 2.0:
NSISetup.exe / Learn more about Secunia NSI 2.0

Secunia PSI
The Secunia PSI reaches user number 500,000! Read our blog entry.


Latest Secunia Advisories [About]

Today - 10 advisories released
Red Hat update for openoffice.org
Mono Sys.Web HTTP Header Injection Vulnerability
OpenOffice "rtl_allocateMemory()" Truncation Vulnerability
Red Hat update for tomcat
Red Hat Directory Server Denial of Service Vulnerabilities
Ubuntu update for yelp
Red Hat update for adminutil
JustSystems Ichitaro Products Unspecified Code Execution Vulnerability
CMME Multiple Vulnerabilities
Red Hat Directory Server Multiple Vulnerabilities

See all advisories...

 
Most Popular [About]

1. CMME Multiple Vulnerabilities
2. Red Hat update for adminutil
3. Red Hat Directory Server Multiple Vulnerabilities
4. JustSystems Ichitaro Products Unspecified Code Execution Vulnerability
5. Mono Sys.Web HTTP Header Injection Vulnerability
6. Red Hat Directory Server Denial of Service Vulnerabilities
7. Red Hat update for tomcat
8. Ubuntu update for yelp
9. OpenOffice "rtl_allocateMemory()" Truncation Vulnerability
10. Red Hat update for openoffice.org


Latest Virus Information [About]

Today - 30 Virus Descriptions released, displaying 15.
VB-EAV - Reported by Sophos
ShipUp-R - Reported by Sophos
Drop-AN - Reported by Sophos
Bifrose-WE - Reported by Sophos
Agent-HNH - Reported by Sophos
Mal/EncPk-EU - Reported by Sophos
JS/Kakworm-B - Reported by Sophos
Zbot-AK - Reported by Sophos
FakeVir-FE - Reported by Sophos
Autorun-IK - Reported by Sophos
BHO-GT - Reported by Sophos
FakeAV-CF - Reported by Sophos
FakeAle-GH - Reported by Sophos
DwnLdr-HHE - Reported by Sophos
Agent-HNA - Reported by Sophos

More Virus Information...
 
Secunia News / Press Releases [About]

Secunia PSI - user number 500,000 reached
30 May, 2008 - The Secunia PSI reaches user number 500,000! Read our blog entry.

Secunia PSI - Release Candidate 2
22 May, 2008 - Secunia just release a new version of the Secunia PSI, Release Candidate 2, read more in the changelog.

Secunia NSI 2.0 Public Beta Test
11 April, 2008 - Public Beta of the 2nd generation Secunia NSI is now available for free testing. Instant Access.

Secunia PSI available in German
20 February, 2008 - A German version of the Secunia PSI has been released, therefore: Willkommen Deutschland!

A rough 24 hours for Windows users - 81.01% affected
7 February, 2008 - The last 24 hours have been rough for Windows users. Sun, Adobe, Apple, and Skype have issued security updates - all four vendors correcting security holes that could lead to system compromise.



Vulnerability Tests [About]

Try some of the Vulnerability Tests, to quickly see if your systems are affected and what steps you can perform to mitigate or eliminate the impact of these vulnerabilities.

Internet Explorer 7 Popup Address Bar Spoofing Test
A vulnerability in Internet Explorer, which can be exploited to spoof the address bar of a popup-window. The vulnerability has been confirmed on a fully patched system with Internet Explorer 7.0 running on Microsoft Windows XP SP2. Other versions may also be affected. Unpatched for 674 days.

Internet Explorer 7 navcancl.htm Cross-Site Scripting Vulnerability
Aviv Raff has discovered a vulnerability in Internet Explorer 7, which can be exploited by malicious people to conduct phishing attacks. The vulnerability is confirmed in Internet Explorer 7 on a fully patched Windows XP SP2 system. Other versions may also be affected. A vendor solution is available.

Apache "Expect" Header Cross-Site Scripting Vulnerability Test
A vulnerability has been discovered in Apache HTTP Server, which can be exploited by malicious people to conduct cross-site scripting attacks. A vendor solution is available.





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia