Your search for flaws returned 552 results.

One of Google's latest features can be manipulated to spread malware, a pair of researchers said Wednesday at the Black Hat conference in Las Vegas. The iPhone 3G, released on Friday, includes faster internet — as well as 13 security fixes. Sun Microsystems has released product updates to correct several "highly critical" vulnerabilities in its Java programming environment. Critical ActiveX control flaws have been detected in the Yahoo! Music Jukebox, which like vulnerabilities reported last week in MySpace and Facebook image uploaders, may permit attackers to take control of users' PCs. Apple patched two issues in Xcode Tools 2.5 on Tuesday, including one flaw that could allow remote code execution.
Researchers at the University of Cambridge have warned that chip and Pin machines are not as secure as the banking industry claims. Cisco late Wednesday patched seven severe vulnerabilities in its widely used internet telephony software that could permit device compromise or system shutdown. Microsoft fixed six vulnerabilities, three of them rated critical, with four patches in its May Patch Tuesday round this week. All were file-format vulnerabilities impacting client-side Windows machines rather than servers. A researcher has released exploit codes for newly discovered Linux kernel 2.6 flaws which could permit attackers to gain root-system privileges they can use to steal data or mount denials of service on Linux-based systems. Researchers today began noticing increased activity on ports directed to media players, a strong indication that attackers are actively screening machines for a new codec vulnerability reported over the weekend. Swiss laboratory launches marketplace for security research. Google has released an update for its Chrome browser that fixes confirmed security vulnerabilities. Mozilla patched eight flaws in its products on Thursday, including “critical” issues in Firefox, Thunderbird and SeaMonkey. Numerous vulnerabilities have been identified in Adobe's popular Flash Player that allow attackers to gain control over a user's PC and use it as a launching pad to obtain sensitive data, inject arbitrary code, launch cross-site scripting attacks and mount privilege escalation attacks on servers hosting cross-domain policy files. Cisco on Wednesday released advisories for flaws in Cisco Security Agent for Windows and CiscoWorks Server. Vulnerability monitoring organisations have reported a flaw in numerous McAfee products that can be exploited to compromise systems. Researchers this week released proof-of-concept code for a number of cross-site scripting flaws on Facebook, but the social networking site said it closed the vulnerabilities within hours. Microsoft has closed out the year with a mammoth security update -- fixing 28 vulnerabilities, many of them Office and web flaws. Remotely exploitable vulnerabilities were revealed for two widely used instant messaging platforms this week. Adobe on Tuesday shipped a fix for its Reader and Acrobat products to eliminate critical flaws.