openSUSE Security Update : phpMyAdmin (openSUSE-2018-206)

This update for phpMyAdmin 4.7.8 fixes the following issues : - CVE-2018-7260: self-cross site scripting XSS vulnerability in the central columns feature boo1082188 This version also fixes some minor functionality bugs. The previous update already fixed CVE-2017-1000499. %NASLMINLEVEL 70300 C...

Fortinet FortiOS 5.4.x < 5.4.6 Denial of Service (FG-IR-17-206)

The version of Fortinet FortiOS running on the remote device is 5.4 prior to 5.4.6. It is, therefore, affected by a Denial of Service DoS vulnerability in the FortiOS webUI. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104352; scriptversion"1.7";...

CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

ns303565.ip-94-23-206.eu XSS vulnerability

Vulnerable URL: http://ns303565.ip-94-23-206.eu/index.php?page=agenda%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=alert'OPENBUGBOUNTY'%20//%3E%3CSvg%3E=33 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:1081-1)

This update for xen fixes the following issues: These security issues were fixed : - CVE-2017-7228: Broken check in memoryexchange permited PV guest breakout bsc1030442. - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progress of the control domain or driver domain,...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:1078-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : xen (SUSE-SU-2017:1080-1)

This update for xen fixes the following issues: These security issues were fixed : - CVE-2017-7228: Broken check in memoryexchange permited PV guest breakout bsc1030442. - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progress of the control domain or driver domain,...

Security update for xen (important)

This update for xen to version 4.7.2 fixes the following issues: These security issues were fixed: - CVE-2017-7228: Broken check in memoryexchange permited PV guest breakout bsc1030442. - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progress of the control domain or...

Fedora 24 : xen (2017-03dc811be6)

Qemu: 9pfs: host memory leakage via v9fscreate CVE-2017-7377 1437873 ---- add additional patch for XSA-206 1436690 ---- xenstore denial of service via repeated update XSA-206 1436690 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Xen Hypervisor xenstored Write Saturation DoS (XSA-206)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability in xenstored during processing of transactions. An attacker on the guest can exploit this vulnerability by issuing repeated writes to xenstore that...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:0983-1)

This update for xen to version 4.7.2 fixes the following issues: These security issues were fixed : - CVE-2017-7228: Broken check in memoryexchange permited PV guest breakout bsc1030442. - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progress of the control domain or...

CVE-2014-6800

The Bloom Township 206 aka net.parentlink.bloom application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Bloom Township 206 aka net.parentlink.bloom application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6800

The Bloom Township 206 aka net.parentlink.bloom application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6800

The CVE-2014-6800 entry applies to the Bloom Township 206 (net.parentlink.bloom) Android app version 4.0.500. The vulnerability arises because the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive informatio...

phpBBFM <= 206-3-3 (phpbb_root_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBBFM Fully Modded Documentation Class: Remote File Include Vulnerability Date: 2006/10/15 Remote: Yes Type: high Site: http://osgaming.net/Downloads/SiteTools/FM206-3-3.zip...

Amazon Linux AMI : php54 (ALAS-2013-206)

Heap-based buffer overflow in the phpquotprintencode function in ext/standard/quotprint.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted argument to the quotedprintableenco...

Fedora 18 : kernel-3.8.2-206.fc18 (2013-3630)

This 3.8.2 update fixes contains a wide variety of important fixes including an issue that many users have seen with backlight during resume. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

python security, bug fix, and enhancement update

2.4.3-43 - add missing patch 206 Related: rhbz549372 2.4.3-42 - fix testpyclbr to match the urllib change in patch 204 patch 206 - allow the 'noproxy' environment variable to override 'ftpproxy' in urllib2 patch 207 - fix typos in names of patches 204 and 205 Related: rhbz549372 2.4.3-41 - backpo...

Oracle Java IE Browser Plugin docbase Parameter Stack Buffer Overflow

Added: 10/15/2010 CVE: CVE-2010-3552 BID: 44023 Background Oracle Java SE and Java for Business are development platforms for developing and deploying Java applications. They include the Java SE Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum requirements fo...