openssl security update

1.0.1e-59.0.4 - Backport fixes for CVE-2023-0286 Orabug: 35212597 1.0.1e-59.0.3 - Fix possible infinite loop in BNmodsqrt CVE-2022-0778Orabug: 33969800 1.0.1e-59.0.1 - Backport fixes for CVE-2020-1971 Orabug: 32654738 1.0.1e-58.0.1 - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug...

Amazon Linux 2 : golang, --advisory ALAS2-2023-2015 (ALAS-2023-2015)

The version of golang installed on the remote host is prior to 1.18.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2015 advisory. Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparseable...

D-Link DAP-1320 < 1.21b05 RCE Vulnerability

D-Link DAP-1320 devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Google Analytics Top Content Widget Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Google Analytics Top Content Widget Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2015-10101 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 218b418ba3dd Credits...

Security Bulletin: Vulnerabilities in libpng affect NVIDIA Linux device drivers for System x, Flex and BladeCenter Systems (CVE-2015-8472 CVE-2015-7981 CVE-2015-8126)

Summary NVIDIA device drivers for 32-bit and 64-bit Linux have addressed the following vulnerabilities in libpng. Vulnerability Details Summary NVIDIA device drivers for 32-bit and 64-bit Linux have addressed the following vulnerabilities in libpng. Vulnerability Details CVE-ID: CVE-2015-8472...

Security Bulletin: Windows Privilege Impersonation Check affects NVIDIA Windows Device Driver for use on NVIDIA PCIe cards installed in System x servers (CVE-2015-1170)

Summary The NVIDIA Windows Server 2008 and 2008 R2 Display Driver's kernel administrator check improperly validates local client impersonation levels in some cases when using the NVIDIA Windows Device Driver for use on NVIDIA PCIe cards installed in System x Servers. NVIDIA's PCIe cards are...

CVE-2015-3507

The connected VERACODE entry documents a memory-leak DoS in OpenSSL caused by a zero-length DTLS fragment. It confirms OpenSSL is vulnerable to DoS via memory exhaustion, but the provided materials do not specify affected versions, exact root-cause code paths, or remediation steps. No exploit det...

CVE-2015-10103

creationtimestamp| type| source ---|---|--- 2023-04-17 22:28:28+00:00| seen| https://t.me/cibsecurity/62299...

CVE-2015-10101

creationtimestamp| type| source ---|---|--- 2023-04-17 21:00:32+00:00| seen| https://t.me/cibsecurity/62238...

CVE-2015-10103

CVE-2015-10103 affects InternalError503 Forget It up to version 1.3. The vulnerability resides in js/settings.js where manipulating the setForgetTime argument with input 0 leads to an infinite loop, enabling a local attack vector. Upgrading to version 1.4 addresses this issue; the patch is identi...

CVE-2015-10102

CVE-2015-10102 affects Freshdesk Plugin 1.7 for WordPress. It describes an open redirect in unknown functionality that could be exploited remotely. Upgrading to version 1.8 remedies the issue (patch: 2aaecd4e0c7c6c1dc4e6a593163d5f7aa0fa5d5b).

CVE-2015-10101

CVE-2015-10101 affects the Google Analytics Top Content Widget plugin for WordPress (up to version 1.5.6). The public details indicate an issue in an unknown functionality of the file class-tgm-plugin-activation.php that enables cross-site scripting (XSS). The vulnerability can be exploited remot...

Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-8710)

Summary Vulnerability in libxml2 affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems CVE-2015-8710 Vulnerability Details Summary Vulnerability in libxml2 affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems CVE-2015-87...

Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM Integrated Management Module II (IMM2) for BladeCenter, System x and FLEX Systems (CVE-2015-7575)

Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM Integrated Management Module II IMM2 for BladeCenter, System x, and FLEX Systems. Vulnerability Details Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM Integrated Management Module II IMM2 for BladeCenter, System x, and FLE...

Security Bulletin: Multiple vulnerabilities in OpenSSH, GNU C Library (glibc), and OpenSSL, including Logjam, affect Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by Integrated Management Module II IMM2. Vulnerability Details Summary OpenSSL...

Security Bulletin: Vulnerability in ntp affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-5219)

Summary A vulnerability in ntp affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems. Vulnerability Details Summary A vulnerability in ntp affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems. Vulnerability Details:...

Security Bulletin: Vulnerabilities in libpng affect IBM Integrated Management Module (IMM) (CVE-2015-7981, CVE-2015-8126)

Summary IBM Integrated Management Module IMM has addressed the following vulnerabilities in libpng. Vulnerability Details Summary IBM Integrated Management Module IMM has addressed the following vulnerabilities in libpng. Vulnerability Details: CVE-ID: CVE-2015-7981 Description: libpng could allo...

Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details: CVE-ID: CVE-2014-9750 Description: NTP NTPd could allow a remote...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Advanced Management Module (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, and CVE-2015-0206)

Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes "FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by IBM BladeCenter Advanced Management Module AMM. AMMhas addressed the applicable CVEs...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM BladeCenter S SAS RAID Module Firmware (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah Attack" for SSL/TLS affects IBM BladeCenter S SAS RAID Module Firmware. Vulnerability Details Summary The RC4 "Bar Mitzvah Attack" for SSL/TLS affects IBM BladeCenter S SAS RAID Module Firmware. Vulnerability Details: CVE-ID: CVE-2015-2808 Description: The RC4...