51365 matches found
CentOS: Security Advisory for gd (CESA-2020:5443)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
RHEL 7 : python-XStatic-Bootstrap-SCSS (RHSA-2020:5571)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5571 advisory. python-XStatic-Bootstrap-SCSS is the Bootstrap-SCSS JavaScript library packaged for setuptools / pip. Security Fixes: XSS in the data-target...
Microsoft Windows Privilege Escalation (CVE-2016-0006)
A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Ubuntu: Security Advisory (USN-4672-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: python-XStatic-Bootstrap-SCSS security update
An update for python-XStatic-Bootstrap-SCSS is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
gd security update
2.0.35-27 - Fix CVE-2016-5766 - Resolves: 1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8...
Microsoft Windows Information Disclosure (CVE-2016-0175)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
JFrog < 7.11.1 Multiple Vulnerabilities
According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.11.1. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This...
Ubuntu 16.04 LTS / 18.04 LTS : unzip vulnerabilities (USN-4672-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4672-1 advisory. Rene Freingruber discovered that unzip incorrectly handled certain specially crafted password protected ZIP archives. If a user or automated...
Moderate: Red Hat Security Advisory: gd security update
An update for gd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Scientific Linux Security Update : gd on SL7.x i686/x86_64 (2020:5443)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5443-1 advisory. - gd: Integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 Note that Nessus has not tested for this issue but has instead relied only...
Huawei EulerOS: Security Advisory for perl-DBD-MySQL (EulerOS-SA-2020-2558)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : perl-DBD-MySQL (EulerOS-SA-2020-2558)
According to the version of the perl-DBD-MySQL package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x a...
CVE-2016-15001
CVE-2016-15001 is rejected/not used; this candidate entry was withdrawn by its CNA.
NewStart CGSL CORE 5.05 / MAIN 5.05 : doxygen Vulnerability (NS-SA-2020-0107)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has doxygen packages installed that are affected by a vulnerability: - Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...
SUSE SLES12 Security Update : jasper (SUSE-SU-2020:2690-1)
This update for jasper fixes the following issues : CVE-2016-9398: Improved patch for already fixed issue bsc1010979. CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. CVE-2016-9397: Fix assert in jpcdequantize bsc1010786. CVE-2016-9557: Fix signed integer overflow bsc1011829. CVE-2017-5499:...
Microsoft Outlook 2016 Information Disclosure Vulnerability (KB4486748)
This host is missing an important security update according to Microsoft KB4486748 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft PowerPoint 2016 RCE Vulnerability (KB4484393)
This host is missing an important security update according to Microsoft KB4484393 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:2689-1)
This update for jasper fixes the following issues : CVE-2016-9398: Improved patch for already fixed issue bsc1010979. CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. CVE-2017-5499: Validate component depth bit bsc1020451. CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456...