141 matches found
Firefox ESR 31.x < 31.5 Multiple Vulnerabilities
The version of Firefox ESR 31.x installed on the remote Windows host is prior to 31.5. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists related to the autocomplete feature that allows an attacker to read arbitrary files. CVE-2015-0822 ...
CentOS Update for firefox CESA-2015:0265 centos7
Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882125";...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Oracle Linux 7 : tomcat (ELSA-2014-0827)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0827 advisory. - Resolves: CVE-2014-0099 Fix possible overflow when parsing - Resolves: CVE-2014-0096 Information discloser process XSLT Tenable has extracted the...
CVE-2014-0827
IBM InfoSphere Optim Workload Replay 1.1 is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2014-0827). An attacker can entice a user to open a crafted URL to inject arbitrary scripts/HTML, potentially access or exfiltrate sensitive data. The vendor lists IBM InfoSphere Optim Workload...
CVE-2012-0827
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors...
CVE-2012-0827
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors...
CVE-2012-0827
Drupal 7.x File module vulnerability CVE-2012-0827 (before 7.11) allows remote authenticated users to read arbitrary private files associated with restricted fields when using unspecified field access modules. The issue is an access-control bypass in the File module, corroborated by OpenVAS/VuXML...
CVE-2012-0827
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors...
Oracle Linux 5 / 6 : openswan (ELSA-2013-0827)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0827 advisory. 2.6.32-20 Resolves: 960234 - CVE-2013-2053 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Oracle Linux 4 : tetex (ELSA-2010-0399)
From Red Hat Security Advisory 2010:0399 : Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
CentOS Update for openswan CESA-2013:0827 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for openswan CESA-2013:0827 centos5
Check for the Version of openswan OpenVAS Vulnerability Test CentOS Update for openswan CESA-2013:0827 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CentOS Update for openswan CESA-2013:0827 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : tetex on SL3.x i386/x86_64
A buffer overflow flaw was found in the way teTeX processed virtual font files when converting DVI files into PostScript. An attacker could create a malicious DVI file that would cause the dvips executable to crash or, potentially, execute arbitrary code. CVE-2010-0827 Multiple integer overflow...
drupal -- multiple vulnerabilities
Drupal development team reports: Cross Site Request Forgery vulnerability in Aggregator module CVE: CVE-2012-0826 An XSRF vulnerability can force an aggregator feed to update. Since some services are rate-limited e.g. Twitter limits requests to 150 per hour this could lead to a denial of service...
CVE-2011-0827
Unspecified vulnerability in the PeopleSoft Enterprise component in Oracle PeopleSoft Products 8.50 GA through 8.50.17 and 8.51 GA through 8.51.07 allows remote authenticated users to affect integrity via unknown vectors related to PeopleTools...
CVE-2011-0827
Unspecified vulnerability in the PeopleSoft Enterprise component in Oracle PeopleSoft Products 8.50 GA through 8.50.17 and 8.51 GA through 8.51.07 allows remote authenticated users to affect integrity via unknown vectors related to PeopleTools...
CVE-2011-0827
CVE-2011-0827 affects Oracle PeopleSoft Products 8.50 GA through 8.50.17 and 8.51 GA through 8.51.07. The issue is described as an unspecified vulnerability in the PeopleSoft Enterprise component, enabling remote authenticated users to affect integrity via unknown vectors related to PeopleTools. ...
SuSE 10 Security Update : TeX (ZYPP Patch Number 7020)
Specially crafted dvi files could cause buffer overflows in dvips and dvipng CVE-2010-0827 / CVE-2010-0829 / CVE-2010-0739 / CVE-2010-1440. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...