CVE-2018-0618

Removed by vendor...

[SECURITY] [DLA 1442-1] mailman security update

Package : mailman Version : 1:2.1.18-2+deb8u3 CVE ID : CVE-2018-0618 CVE-2018-13796 Debian Bug : 903674 Two flaws were discovered in mailman, a web-based mailing list manager. CVE-2018-0618 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. discovered that mailman is prone to a cross-si...

Debian DSA-4246-1 : mailman - security update

Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. discovered that mailman, a web-based mailing list manager, is prone to a cross-site scripting flaw allowing a malicious listowner to inject scripts into the listinfo page, due to not validated input in the hostname field. C Tenable...

[SECURITY] [DSA 4246-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4246-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2018 https://www.debian.org/security/faq -...

MGASA-2018-0313 Updated mailman packages fix security vulnerability

It was discovered that mailman version prior to 2.1.27 contained a vulnerability where malicious list owners could inject evil scripts into listinfo pages CVE-2018-0618...

openSUSE Security Update : mailman (openSUSE-2018-691)

This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...

openSUSE: Security Advisory for mailman (openSUSE-SU-2018:1858-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mailman (moderate)

This update for mailman to version 2.1.27 fixes the following issues: This security issue was fixed: - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed: - The hash generated when...

CVE-2018-0618

A cross-site scripting vulnerability XSS has been discovered in mailman due to the hostname field not being properly validated. A malicious list owner could use this flaw to create a specially crafted list and inject client-side scripts...

CVE-2016-0618

Oracle Solaris 11 Zones component vulnerability (CVE-2016-0618) allows local users to read a subset of Solaris data and escalate privileges. The issue is addressed in the Jan 2016 CPU (SRU11_3_4_5_0) patch; apply the CPU fixes to mitigate. Exploitation details are not provided in the current docu...

Oracle Solaris Critical Patch Update : jan2016_SRU11_3_4_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Grub2. The supported version that is affected is 11. Difficult to exploit vulnerability requiring logon to Operating...

SUSE SLED10 Security Update : Acrobat Reader (SUSE-SU-2013:0044-1)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 , CVE-2013-0601 , CVE-2013-0602 , CVE-2013-0603 , CVE-2013-0604 , CVE-2013-06...

CVE-2015-0618

Cisco IOS XR DoS (CVE-2015-0618) affects IOS XR 5.0.1/5.2.1 on NCS 6000 and 5.1.3/5.1.4 on CRS-X. The issue arises from improper processing of malformed IPv6 packets with extension headers, allowing remote attackers to trigger a line-card reload and thus a denial of service. Evidence in multiple ...

openSUSE Security Update : acroread (openSUSE-SU-2013:0363-1)

Update to 9.5.3 bnc797529 to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616,...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)

Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)

Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

CVE-2014-0618

The CVE-2014-0618 entry affects Juniper Junos SRX Series gateways when configured as a UAC enforcer with Captive Portal enabled. A crafted HTTP message can cause the flowd daemon to crash, leading to remote denial of service. Affected versions include Junos releases prior to 10.4R16, 11.4R8, 12.1...

SuSE 11.2 Security Update : Acrobat Reader (SAT Patch Number 7230)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8431)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...

CVE-2013-0618

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614...