129 matches found
Moderate: Red Hat Security Advisory: mysql security and bug fix update
Updated mysql packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
[SECURITY] [DSA 2848-1] mysql-5.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2848-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2845-1] mysql-5.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2845-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2014 http://www.debian.org/security/faq -...
CVE-2014-0437
CVE-2014-0437 is an unspecified vulnerability in the MySQL Server component (affecting Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier) that allows remote authenticated users to affect availability via unknown vectors (related to the Optimizer). Connected advisories no...
IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities
The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...
Oracle Java SE Multiple Vulnerabilities (February 2013 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 13 or 6 Update 39, or is earlier than or equal to 5 Update 38 or 1.4.2 Update 40. It is, therefore, potentially affected by security issues in the following components : - 2D - AW...
Oracle Java SE Multiple Vulnerabilities -01 Feb 13 (Windows)
This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln01feb13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -01 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013...
Critical: Red Hat Security Advisory: java-1.7.0-oracle security update
Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
CVE-2013-0437
CVE-2013-0437 affects Oracle Java SE 7 up to Update 11 and JavaFX 2.2.4 and earlier. The vulnerability is described as unspecified with remote attackers potentially impacting confidentiality, integrity, and availability via unknown vectors related to 2D. The NVD entry assigns a CVSS v2 base score...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
Security fixes : - a NULL pointer dereference flaw was found in the sctprcvootb function in the Linux kernel Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet to a target system, resulting in a denial of service. CVE-2010-0008,...
CentOS Update for kernel CESA-2010:0147 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-0437
shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control DTC before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edsshaccount parameter in a deletesshaccount Delete action...
CVE-2011-0437
shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control DTC before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edsshaccount parameter in a deletesshaccount Delete action...
CVE-2011-0437
CVE-2011-0437 affects Domain Technologie Control (DTC) prior to 0.32.9. The vulnerability resides in shared/inc/sql/ssh.php of the SSH accounts management implementation, where an authenticated remote user can delete arbitrary accounts via the edssh_account parameter in the deletesshaccount actio...
[SECURITY] [DSA 2179-1] dtc security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2179-1] dtc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-947-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update
An updated rhev-hypervisor package that fixes multiple security issues and several bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE-2010-0437
CVE-2010-0437 affects the Linux kernel, specifically versions prior to 2.6.27. The vulnerability resides in ip6_dst_lookup_tail() (net/ipv6/ip6_output.c) where certain conditions involving an IPv6 TUN interface and a large number of neighbors are mishandled, allowing a remote attacker to cause a ...
Linux Kernel ip6_dst_lookup_tail()函数远程拒绝服务漏洞
CVECAN ID: CVE-2010-0437 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ip6dstlookuptail函数中存在空指针引用漏洞。本地网络上的攻击者可以通过向目标系统发送IPv6通讯来触发这个漏洞,如果接收到IPv6报文时目标系统上dst-neighbour为空,就会导致系统崩溃 Linux kernel 2.6.x 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...