SUSE-SU-2015:0658-1 Security Update for Linux Kernel

The SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-2150: Xen and the Linux...

Fedora Update for kernel FEDORA-2015-4059

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2150

CVE-2015-2150 affects Xen 3.3.x–4.5.x and the Linux kernel up to 3.19.1, where access to PCI command registers is not properly restricted. This can allow a local guest OS user to cause a denial of service (unexpected NMI, host crash) by disabling memory or I/O decoding for a PCI Express device an...

CVE-2013-2150

Multiple cross-site scripting XSS vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files...

CVE-2013-2150

Multiple cross-site scripting XSS vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files...

Server: Multiple XSS vulnerabilities

Cross-site scripting XSS vulnerabilities in js/viewer.js inside the filesvideoviewer application via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and 4.5.12 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files. CVE-2013-2150...

SuSE 11 Security Update : GNOME screensaver (SAT Patch Number 2150)

When resuming a system, gnome-screensaver does not lock external displays that got connected while the system was suspended. CVE-2010-0285 - Pressing the 'Return' key repeatedly caused an X error that terminated gnome-screensaver. CVE-2010-0732 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian Security Advisory DSA 2150-1 (request-tracker3.6)

The remote host is missing an update to request-tracker3.6 announced via advisory DSA 2150-1. OpenVAS Vulnerability Test $Id: deb21501.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2150-1 request-tracker3.6 Authors: Thomas Reinke Copyright: Copyright c 20...

Debian DSA-2150-1 : request-tracker3.6 - unsalted password hashing

It was discovered that Request Tracker, an issue tracking system, stored passwords in its database by using an insufficiently strong hashing method. If an attacker would have access to the password database, he could decode the passwords stored in it. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2010-2150

Cross-site scripting XSS vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2150

CVE-2010-2150 corresponds to a cross-site scripting (XSS) vulnerability in Fujitsu e-Pares V01 L01. Multiple connected sources confirm that an arbitrary script can be executed in the user’s browser via unspecified vectors. The affected product is e-Pares (V01 L01). Underlying impact is limited to...

CVE-2009-2150

CVE-2009-2150 has concrete details: CSRF vulnerabilities in Campus Virtual-LMS. The issues enable remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and may also allow hijacking via ADD or DELETE actions to enrolments/step2...

CVE-2009-2150

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8937...

CVE-2007-2150

BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

CVE-2007-2150

BlueArc Titan 2x00 devices running firmware 4.2.944b are affected by CVE-2007-2150, allowing remote attackers to redirect traffic to external sites using the FTP PORT command (FTP bounce), a variant of CVE-1999-0017. The issue is tied to BlueArc-FTPD parsing of PORT-based redirects and represents...

CVE-2006-2150

PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter...

CVE-2002-2150

Technical details for CVE-2002-2150 are not publicly available in the provided connected documents. The materials reproduce the description but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2005-2150

CVE-2005-2150 affects Windows NT 4.0 and Windows 2000 prior to URP1 for Windows 2000 SP4. It stems from insufficient handling of NULL sessions over alternate named pipes, enabling anonymous access to certain interfaces (svcctl and eventlog). Exploitation could allow an unauthenticated remote atta...

CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to 1 list Windows services via svcctl or 2 read eventlogs via eventlog...

CVE-2004-2150

The CVE-2004-2150 entry concerns Nettica Corporation INTELLIPEER Email Server 1.01, which discloses account validity through differing error messages. Related sources (PT-2004-3045 and Nessus entries) describe remote authentication attempts revealing whether an account exists, enabling user enume...