7992 matches found
AIX Java Advisory : java_july2015_advisory.asc (Logjam)
The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities : - Java Security Components store plaintext data in memory dumps, which allows a local attacker to gain access to sensitive information. CVE-2015-1931 - A flaw exists in the readSerialData function i...
Joomla Module JoomShopping SQLi Vulnerability
The Joomla JoomShopping module is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20150722)
A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well. CVE-2015-1867 This update also fixes the...
Scientific Linux Security Update : ipa on SL6.x i386/x86_64 (20150722)
Note: The IdM version provided by this update no longer uses jQuery. Bug fixes : - The ipa-server-install, ipa-replica-install, and ipa-client-install utilities are not supported on machines running in FIPS-140 mode. Previously, IdM did not warn users about this. Now, IdM does not allow running t...
WideImage Demo Code Cross Site Scripting Vulnerability
WideImage is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.5 or 7.4.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists exists in OpenSSL due to the pretty...
OracleVM 3.3 : net-snmp (OVMSA-2015-0099)
The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...
Fedora 22 : drupal7-path_breadcrumbs-3.3-1.fc22 (2015-11858)
7.x-3.3 See SA-CONTRIB-2015-133 - New token %site:current-page:path-menu-trail:pb-join: is an alternative approach to build breadcrumbs based on path hierarchy. - Fixed 2473109: Destination parameter is present but doesn't work during editing breadcrumb - Other improvements and fixes. Note that...
Fedora 21 : drupal7-path_breadcrumbs-3.3-1.fc21 (2015-11836)
7.x-3.3 See SA-CONTRIB-2015-133 - New token %site:current-page:path-menu-trail:pb-join: is an alternative approach to build breadcrumbs based on path hierarchy. - Fixed 2473109: Destination parameter is present but doesn't work during editing breadcrumb - Other improvements and fixes. Note that...
Oracle Linux 6 : net-snmp (ELSA-2015-1385)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1385 advisory. - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565 Tenable has extracted the preceding description block directly...
Fedora 21 : php-5.6.11-1.fc21 (2015-11581)
10 Jul 2015, PHP 5.6.11 Core: - Fixed bug 69768 escapeshell doesn't cater to !. cmb - Fixed bug 69703 Use builtinclzl on PowerPC. dja at axtens dot net, Kalle - Fixed bug 69732 can induce segmentation fault with basic php code. Dmitry - Fixed bug 69642 Windows 10 reported as Windows 8. Christian...
CentOS 6 : ipa (CESA-2015:1462)
Updated ipa packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Accellion FTA < 9.11.200 File Disclosure Vulnerability - Active Check
Accellion FTA is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CentOS 6 : pacemaker (CESA-2015:1424)
Updated pacemaker packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
PivotX Multiple Vulnerabilities (Jul 2015)
PivotX is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pivotx:pivotx"; if description...
Xceedium Xsuite - Multiple Vulnerabilities
Xceedium Xsuite - Multiple Vulnerabilities See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02...
Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02]
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...
Xceedium Xsuite - Multiple Vulnerabilities
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...
Accellion Secure File Transfer Appliance 'oauth_token' Parameter Remote Command Execution
The remote Accellion Secure File Transfer Appliance is affected by a remote command execution vulnerability due to improper sanitization of user-supplied in put to the 'oauthtoken' parameter in the getoauthcustomername and verifyoauthtoken functions. The parameter is passed to a system command...
Xceedium Xsuite Command Injection / XSS / Traversal / Escalation Vulnerabilities
Xceedium Xsuite versions 2.3.0 and 2.4.3.0 suffer from command injection, cross site scripting, directory traversal, hard-coded credential, and privilege escalation vulnerabilities. Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02...