Security update for openjpeg2 (important)

This update for openjpeg2 fixes the following issues: - CVE 2016-7163: Integer Overflow could lead to remote code execution bsc997857 - CVE 2015-8871: Use-after-free in opjj2kwritemco function could lead to denial of service bsc979907 This update was imported from the SUSE:SLE-12-SP2:Update updat...

Puppet Enterprise console remote code execution vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. console is one of the console tools. ...

Travel to the dark of the door! Debugee in QEMU-vulnerability warning-the black bar safety net

I haven't to secure guest posting, just recently the contact vulnerability discovery, and have been reading some of the classic fuzzer source code, at the same time also began to contact the virtualization escape this piece of content, at this time happened to come across two very classic exploit...

Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)

The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2017-1842-1. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2017:2144-1)

This update for openjpeg2 fixes the following issues : - CVE 2016-7163: Integer Overflow could lead to remote code execution bsc997857. - CVE 2015-8871: Use-after-free in opjj2kwritemco function could lead to denial of service bsc979907. Note that Tenable Network Security has extracted the...

Fedora 25 : python-dbusmock (2017-4ede204115)

Security fix for CVE-2015-1326 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for python-dbusmock FEDORA-2017-4ede204115

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3156

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

CVE-2015-3156

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

UBUNTU-CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-3616

SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters...

CVE-2015-3616

Fortinet FortiManager is affected by CVE-2015-3616 due to a SQL injection in FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2. A remote attacker can exploit unspecified parameters to execute arbitrary commands. Impact: potential remote code execution with high severity. Affected components...

CVE-2015-3615

Fortinet FortiManager is affected by a Cross‑Site Scripting (XSS) vulnerability in FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2. A remote authenticated user can inject arbitrary web script or HTML via unspecified parameters, with privilege escalation potential. Root cause and exact exp...

CVE-2015-3156

CVE-2015-3156 affects OpenStack Trove (DBaaS) as packaged in OpenStack before 2015.1.0 (Kilo). A local attacker could write to configuration files via a symlink attack on a temporary file. The description lists multiple vulnerable components (e.g., _write_config in trove/guestagent/datastore/expe...

CVE-2015-3156

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

CVE-2015-3615

Cross-site scripting XSS vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack...

CVE-2015-3614

Fortinet FortiManager is affected. Versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 contain an information-disclosure vulnerability that allows remote attackers to obtain arbitrary files via a vector involving another unspecified vulnerability. The issue is caused by a vulnerability in FortiMa...

CVE-2015-1783

The CVE-2015-1783 entry concerns the Lasso library. The root cause is a flaw in the get_or_define_ns function where the prefix variable can lead to uninitialized memory access, enabling a remote attacker to trigger a denial of service via unspecified vectors, resulting in an application crash. Th...