Important: Red Hat Security Advisory: python-jinja2 security update

An update for python-jinja2 is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a securit...

Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business

Microsoft is aware of an issue in Windows Hello for Business WHfB with public keys that persist after a device is removed from Active Directory, if the AD exists. After a user sets up Windows Hello for Business WHfB, the WHfB public key is written to the on-premises Active Directory. The WHfB key...

dexterton.com Cross Site Scripting vulnerability

Security Researcher egyptghost Helped patch 410 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting dexterton.com website and its users. Following coordinate...

openSUSE Security Update : bluez (openSUSE-2019-2588)

This update for bluez fixes the following issues : - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

EulerOS 2.0 SP8 : glibc (EulerOS-SA-2019-2307)

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address...

openSUSE Security Update : bluez (openSUSE-2019-2585)

This update for bluez fixes the following issues : - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE: Security Advisory for bluez (openSUSE-SU-2019:2585-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2588-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2585-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bluez (moderate)

openSUSE Security Update: Security update for bluez Announcement ID: openSUSE-SU-2019:2588-1 Rating: moderate References: 1013712 Cross-References: CVE-2016-9798 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for bluez fixes...

Microsoft Excel 2016 1901 Import Error XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-2016-v1901-IMPORT-ERROR-EXTERNAL-ENTITY-INJECTION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Excel 2016 v1901 Microsoft Excel is a spreadsheet...

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

CVE-2016-4980

CVE-2016-4980 affects xquest prior to 2016-06-13, describing a password generation weakness. Multiple connected sources (NVD entry, EulerOS/RHEL advisories, Nessus open code, and PT Security) confirm the issue stems from the xguest/xquest password creation method and indicate the vulnerability ex...

Fedora 30 : imapfilter (2019-90925dd5aa)

New upstream release: fixes CVE-2016-10937 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

Fedora 31 : imapfilter (2019-a6c5d70bde)

New upstream release: fixes CVE-2016-10937 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...

CVE-2016-9271

CVE-2016-9271 affects Cloudera Manager: versions 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1. The vulnerability is a cross-site scripting issue in the Help Query/Help search feature, stemming from insufficient validation of client-side data in the web application. Impact is des...

CVE-2016-5724

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...

CVE-2016-3131

Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...

CVE-2016-3192

CVE-2016-3192 affects Cloudera Manager 5.x before 5.7.1. The vulnerability stems from storing sensitive data in cleartext readable files, enabling potential disclosure. Impact is exposure of sensitive information as stated in multiple records (NVD/Red Hat/CNVD references). The affected product is...