RHEL 6 : qemu-kvm (RHSA-2014:0420)

Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140422)

Multiple integer overflow, input validation, logic error, and buffer overflow flaws were discovered in various QEMU block drivers. An attacker able to modify a disk image file loaded by a guest could use these flaws to crash the guest, or corrupt QEMU process memory on the host, potentially...

Oracle Linux 6 : qemu-kvm (ELSA-2014-0420)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0420 advisory. - kvm-qcow2-Check-backingfileoffset-CVE-2014-0144.patch bz1079452 bz1079453 - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch bz1079452 bz10794...

qemu security update

CentOS Errata and Security Advisory CESA-2014:0420 Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS ba...

Moderate: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix several security issues are now available for Red Hat Enterprise Virtualization. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Cisco IronPort PostX < 6.2.9.1 Multiple Vulnerabilities

The version of Cisco IronPort PostX on the remote device is a version prior to 6.2.9.1. As such, it is affected by multiple vulnerabilities : - An unspecified vulnerability in the administrative interface in the embedded HTTPS server allows remote attackers to read arbitrary files via unknown...

Oracle Linux 5 / 6 : firefox (ELSA-2013-0144)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0144 advisory. firefox 10.0.12-1.0.1.el63 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 10.0.12-1 - Update to 10.0.12 ESR...

CVE-2013-0144

CVE-2013-0144 is a CSRF vulnerability in QNAP VioStor NVR devices (firmware 4.0.3) where an attacker can trick an authenticated administrator into crafting requests via cgi-bin/create_user.cgi?NEW USER, potentially creating new admin accounts. The related Red Hat/NVD entries describe the same iss...

RHEL 5 / 6 : flash-plugin (RHSA-2012:0144)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0144 advisory. - flash-plugin: multiple code execution flaws APSB12-03 CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756 -...

CVE-2012-0144

Cross-site scripting XSS vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."...

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

Microsoft SharePoint themeweb.aspx Cross-Site Scripting (MS12-011; CVE-2012-0144)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0144

CVE-2011-0144 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle attacker to exploit vectors related to iTunes Store browsing to execute arbitrary code or cause a denial of service via memory corruption and application crash. Connected reso...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CVE-2010-0144

CVE-2010-0144 : Affected Cisco IronPort Encryption Appliance/PostX MAP systems running 6.2.x before 6.2.9.1 or 6.5.x before 6.5.2 (and PostX MAP before 6.2.9.1) expose an unspecified vulnerability in the WebSafe DistributorServlet of the embedded HTTPS server that allows remote attackers to read ...

CVE-2009-0144

CVE-2009-0144 concerns CFNetwork in Apple Mac OS X 10.5.x (before 10.5.7). The issue arises from improper parsing of noncompliant Set-Cookie headers, which may cause certain cookies (including sensitive ones) to be sent over unencrypted HTTP connections. Affected: Mac OS X 10.5 through 10.5.6 (se...

Debian Security Advisory DSA 267-2 (lpr)

The remote host is missing an update to lpr announced via advisory DSA 267-2. OpenVAS Vulnerability Test $Id: deb2672.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 267-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...