RHEL 5 : rhev-hypervisor (RHSA-2011:1090)

An updated rhev-hypervisor package that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Ubuntu: Security Advisory (USN-2247-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2248-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2013-1068

The OpenStack Nova python-nova package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder python-cinder package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properl...

CVE-2013-1068

The OpenStack Nova python-nova package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder python-cinder package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properl...

CVE-2013-1068

CVE-2013-1068 affects OpenStack Nova (python-nova) and OpenStack Cinder on Ubuntu 13.10/14.04 LTS, where sudo configuration is not properly set up. The issue can enable privilege escalation when combined with another vulnerability. Ubuntu security notices USN-2247-1 and USN-2248-1 address this by...

[USN-2247-1] OpenStack Nova vulnerabilities

========================================================================== Ubuntu Security Notice USN-2247-1 June 17, 2014 nova vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

[USN-2248-1] OpenStack Cinder vulnerability

========================================================================== Ubuntu Security Notice USN-2248-1 June 18, 2014 cinder vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

Ubuntu 14.04 LTS : OpenStack Cinder vulnerability (USN-2248-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2248-1 advisory. Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Cinder did not properly set up its sudo configuration. If a different flaw was found in...

USN-2248-1 cinder vulnerability

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Cinder did not properly set up its sudo configuration. If a different flaw was found in OpenStack Cinder, this vulnerability could be used to escalate privileges. CVE-2013-1068...

USN-2248-1: OpenStack Cinder vulnerability

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Cinder did not properly set up its sudo configuration. If a different flaw was found in OpenStack Cinder, this vulnerability could be used to escalate privileges. CVE-2013-1068...

Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-2247-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2247-1 advisory. Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Nova did not properly set up its sudo configuration. If a different flaw was found in...

UBUNTU-CVE-2013-1068

The OpenStack Nova python-nova package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder python-cinder package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properl...

CVE-2012-1068

Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...

CVE-2012-1068

The CVE-2012-1068 entry concerns the WP-RecentComments WordPress plugin (before 2.0.7). The vulnerability is an XSS in the rc_ajax function in core.php that allows an attacker to inject arbitrary web script or HTML via the page parameter, related to AJAX paging. Affected component: WordPress WP-R...

CVE-2011-1068

CVE-2011-1068 affects the Microsoft Windows Azure SDK (1.3.x) prior to 1.3.20121.1237 when using Full IIS and a Web Role with an ASP.NET application. The vulnerability arises from improper support for cookie-based state maintenance, enabling a remote attacker to read an encrypted cookie and poten...

CVE-2010-1068

The CVE-2010-1068 entry describes multiple cross-site scripting (XSS) vulnerabilities in SurgeFTP 2.3a6, specifically in surgeftpmgr.cgi. The issue enables remote attackers to inject arbitrary web script or HTML via the domainid or classid parameters in a class action. Connected sources identify ...

SurgeFTP 'surgeftpmgr.cgi' Multiple Cross Site Scripting Vulnerabilities

SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

BSPlayer Stack Overflow Vulnerability BLS

This host is running BSPlayer Free Edition and is prone to Stack Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbbsplayerblsbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BSPlayer Stack Overflow Vulnerability BLS Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH...

CVE-2009-1068

BS.Player (bsplayer) versions 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier are affected by a stack-based buffer overflow. The vulnerability allows remote attackers to crash the application or potentially execute arbitrary code via a long hostname in a .bsl playlist file. This CVE (CVE-2...