35968 matches found
RHEL 7 : JBoss EAP (RHSA-2016:1839)
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...
RHEL 7 : Red Hat JBoss Enterprise Application Platform (RHSA-2015:1671)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1671 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release serves as a...
RHEL 6 : JBoss EAP (RHSA-2016:1838)
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...
Updated libxcursor packages fix security vulnerability
Updated libxcursor packages fix security vulnerability XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. CVE-2015-9262...
CVE-2015-6565
creationtimestamp| type| source ---|---|--- 2018-08-29 07:58:51+00:00| published-proof-of-concept| https://t.me/antichat/2044...
CVE-2015-9264
Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service...
CVE-2015-9264
Lansweeper 4.x–6.x prior to 6.0.0.48 contains a vulnerability that allows an attacker to execute arbitrary code on an administrator’s workstation by supplying a crafted Windows service. Affected product: Lansweeper (Windows, admin workstation context). Root cause: improper handling of Windows ser...
CVE-2015-9263
The CVE-2015-9263 entry concerns Idera Up.Time Monitoring Station (versions up to 7.5.0 build 16 and 7.4.0 build 13) where the post2file.php upload mechanism allows uploading arbitrary files (e.g., PHP) to the webroot. The underlying issue is an unauthenticated arbitrary file upload that can lead...
CVE-2015-5243
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record...
CVE-2015-5243
CVE-2015-5243 affects phpWhois and several forks. The vulnerability arises from the generic_parser_b in the WHOIS data parser, which builds PHP statements and passes them to eval, allowing arbitrary code execution when processing crafted WHOIS records. Impact is remote code execution via manipula...
CVE-2015-5160
CVE-2015-5160 affects libvirt before 2.2, where Ceph credentials used on the qemu command line for RADOS Block Device (RBD) can be exposed to local users via a process listing. Impact is local information disclosure of Ceph credentials. Affected component: libvirt (libvirtd) with RBD usage; root ...
Photon OS 1.0: Libxslt / Linux / Sqlite PHSA-2017-0025 (deprecated)
An update of linux,sqlite-autoconf,libxslt packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0025. The text itself is copyright C...
Photon OS 1.0: Curl / Freetype2 / Glibc / Systemd PHSA-2017-0041 (deprecated)
An update of systemd,curl,glibc,freetype2 packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0041. The text itself is copyright C...
Photon OS 1.0: Binutils / Libarchive / Ntp PHSA-2017-0010 (deprecated)
An update of binutils,ntp,libarchive packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMwar...
Security Bulletin: Multiple Vulnerabilities found in products bundled with IBM Security Access Manager for Enterprise Single-Sign On
Summary IBM WebSphere Application Server is shipped as a component of IBM Security Access Manager for Enterprise Single-Sign On. Information about Security vulnerabilities affecting IBM WebSphere Application Server have been published in security bulletins. Vulnerability Details Consult the...
Security Bulletin: Ceilometer database access unrestricted in PowerVC (CVE-2015-1937)
Summary IBM PowerVC is using a ceilometer database that does not have authentication enabled. Vulnerability Details CVEID: CVE-2015-1937 DESCRIPTION: IBM PowerVC NoSQL database used by ceilometer is listening on the remote port and is configured to allow connections without any authentication. A...
openSUSE: Security Advisory for gdk-pixbuf (openSUSE-SU-2018:2287-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2015-0899)
Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...
Security Bulletin: Current Release of IBM® SDK for Node.js™ is affected by CVE-2015-0278
Summary Privilege escalation vulnerability in libuv, caused by the failure to invoke setgroups prior to calling setuid and setgid. Vulnerability Details CVE-ID: CVE-2015-0278 Description: libuv could allow a local attacker to gain elevated privileges on the system, caused by the failure to invoke...