177 matches found
Critical: Red Hat Security Advisory: openshift-origin-broker security update
Updated openshift-origin-broker and rubygem-openshift-origin-auth-remote-user packages that fix one security issue are now available for Red Hat OpenShift Enterprise 2.0.5. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring...
Critical: Red Hat Security Advisory: openshift-origin-broker security update
Updated openshift-origin-broker and rubygem-openshift-origin-auth-remote-user packages that fix one security issue are now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring...
Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability - Mac OS X
Adobe Reader/Acrobat is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-0188
CVE-2013-0188 is rejected/not used and does not represent an active vulnerability entry.
Oracle Linux 6 : ipa (ELSA-2013-0188)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0188 advisory. 2.2.0-17.el63.1 - Fix changelog issue. The dist tag was in each entry and changing the build release changed history. 878219 2.2.0-17.el63 - Use a secure method...
Oracle Linux 5 : ruby (ELSA-2011-0909)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0909 advisory. - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005...
Oracle Linux 6 : ruby (ELSA-2011-0910)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0910 advisory. - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005...
Oracle Linux 4 : ruby (ELSA-2011-0908)
From Red Hat Security Advisory 2011:0908 : Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
CentOS 5 : ruby (CESA-2011:0909)
Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
SuSE 10 Security Update : squid (ZYPP Patch Number 8464)
A denial of service problem in Squid via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
Fake Payroll Confirmation Email Leads to Black Hole Exploit Kit
Criminal hackers launched an attack campaign earlier this week in which they sent a slew of emails purporting to come from the financial software developer Intuit. The emails contained links that led to sites hosting the Blackhole exploit kit in an apparent attempt to infect the machines of...
Scientific Linux Security Update : ruby on SL6.x i386/x86_64
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker coul...
CentOS Update for ruby CESA-2011:0909 centos5 x86_64
Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2011:0909 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fake Automated Craigslist Email Notifications Link to Blackhole Exploit Kit
UPDATE: A big wave of emails purporting to be Craigslist notifications but containing links to websites hosting the Black Hole exploit kit hit the Internet yesterday, a day that already was filled with drama surrounding the LinkedIn password dump. The malicious emails, 150,000 of which were caugh...
RedHat Update for ruby RHSA-2011:0910-01
Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2011:0910-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
RedHat Update for ruby RHSA-2011:0910-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedKit Exploit Kit : New web malware exploitation pack
RedKit Exploit Kit : New web malware exploitation pack Trustwave researchers have spotted a new exploit kit called "RedKit Exploit Kit" that being used in the wild is aiming to enter a market that is practically monopolized by the widely famous BlackHole and Phoenix exploit kits. In actual, The n...
Ubuntu: Security Advisory (USN-1377-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-0188
IBM SPSS products (Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, 6.0.1) are affected by CVE-2012-0188 due to a buffer overflow in the SetLicenseInfoEx() method of the mraboutb.dll ActiveX control. The vulnerability arises from copying the first parameter (strInstallDir) into a 256-byte global...