[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3425-1 (tryton-server - security update)

Cdric Krier discovered a vulnerability in the server-side of Tryton, an application framework written in Python. An authenticated malicious user can write arbitrary values in record fields due missed checks of access permissions when multiple records are written. The oldstable distribution wheezy...

Oracle: Security Advisory (ELSA-2014-0861)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : Virtualization Manager (RHSA-2012:1506)

Red Hat Enterprise Virtualization Manager 3.1 is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the C...

RHEL 6 : rhev-3.1.0 vdsm (RHSA-2012:1508)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1508 advisory. VDSM is a management module that serves as a Red Hat Enterprise Virtualization Manager agent on Red Hat Enterprise Virtualization Hypervisor...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:1505)

An updated rhev-hypervisor6 package that fixes one security issue, various bugs, and adds enhancements is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS Update for lzo CESA-2014:0861 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-0861

CVE-2014-0861 describes an XSS vulnerability in IBM Cognos BI/BI Server components (IBM Cognos BI Server 8.4.1; 10.1.x; 10.2.x; 10.2.1.x) where an unsafely handled parameter during use of the Back button enables an attacker to inject script/HTML. The issue is tied to insufficient input sanitizati...

CVE-2013-0861

The CVE-2013-0861 vulnerability affects FFmpeg’s avcodec_decode_audio4 function (libavcodec/utils.c) and allows remote triggers of memory corruption through channel layout vectors. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.1. Documents consistently describe this as a remote-c...

CVE-2012-0861

The CVE-2012-0861 issue affects Red Hat Enterprise Virtualization Manager (RHEV-M) prior to version 3.1. During host addition, the vds_installer downloads deployUtil.py and vds_bootstrap.py with curl -k, skipping SSL certificate validation. This MITM condition lets an attacker on the local networ...

Important: Red Hat Security Advisory: rhev-3.1.0 vdsm security, bug fix, and enhancement update

Updated vdsm packages are now available for Red Hat Enterprise Linux 6.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability...

Important: Red Hat Security Advisory: rhev-hypervisor6 security, bug fix, and enhancement update

An updated rhev-hypervisor6 package that fixes one security issue, various bugs, and adds enhancements is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS Update for mod_dav_svn CESA-2011:0861 centos4 i386

Check for the Version of moddavsvn OpenVAS Vulnerability Test CentOS Update for moddavsvn CESA-2011:0861 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2011:0861 Updated subversion packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

CVE-2011-0861

Technical details for CVE-2011-0861 are not publicly available in the provided documents. Monitor for updates; no concrete exploit, affected products, or remediation details are provided in the sources.

CVE-2010-0861

Technical details for CVE-2010-0861 are not publicly available in the provided documents. Monitor for updates released through Oracle CPU advisories and vendor notices before assuming vulnerability scope, impact, or fixes.

CVE-2009-0861

Cross-site scripting XSS vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information...

CVE-2009-0861

The CVE-2009-0861 issue affects phpDenora prior to 1.2.3, where an XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. The root cause is a cross-site scripting flaw in handling channel names; impact is web scripting execution on affected deplo...

CVE-2008-0861

CVE-2008-0861 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Quickplace 7.0, specifically in leg/Main.nsf. An attacker can inject arbitrary web script or HTML through an h_SearchString sub-parameter inside the PreSetFields parameter of an EditDocument action. The NVD entry list...

CVE-2007-0861

PHP remote file inclusion vulnerability in phpCOIN RC-1 and earlier affecting modules/mail/index.php. An attacker could execute arbitrary PHP code via a URL in the _CCFG['_PKG_PATH_MDLS'] parameter. Note: this issue has been disputed by a reliable third party, claiming a fatal error occurs before...