Mageia: Security Advisory (MGASA-2014-0280)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:2263)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2263-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 - Mozilla: Thunderbird stored OpenPGP secret keys without...

Oracle Linux 7 : thunderbird (ELSA-2021-2263)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2263 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

RHEL 7 : thunderbird (RHSA-2021:2263)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2263 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.11.0. Security Fixes: Mozilla:...

CVE-2021-2263

CVE-2021-2263 affects Oracle E-Business Suite Oracle Sourcing Intelligence/RFx (12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can cause unauthorized creation/modification/deletion of data or access to Oracle Sourcing data. Public descriptions consistently state CVSS v3.1 ...

CVE-2020-2263

Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2263

Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2263

The CVE-2020-2263 entry concerns Jenkins Radiator View Plugin (versions ≤ 1.29). The issue is a stored XSS caused by the plugin not escaping the full job name in tooltips, which could be exploited by attackers who have Job/Configure permission. The vulnerability affects the plugin as described in...

CVE-2020-2263

Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

openSUSE Security Update : bind (openSUSE-2019-2263)

This update for bind fixes the following issues : Security issue fixed : - CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 Non-security issue fixed : - bind will no longer rely on /etc/insserv.conf bsc1118367, bsc1118368 This update was imported from the SUSE:SLE-15:Update updat...

CVE-2019-2263

This CVE (CVE-2019-2263) affects Qualcomm/Qualcomm Snapdragon kernel components, specifically a use-after-free in the diag driver that can access freed memory during reads. The issue spans numerous Snapdragon generations and device families (e.g., IPQ4019, IPQ8064, MDM9xxx, SDM/SDx series). Root ...

CVE-2018-2263

CVE-2018-2263 is rejected/not used and does not represent a valid vulnerability entry.

CVE-2018-2263

...

nginx < 0.7.66 / 0.8.x < 0.8.40 Information Disclosure

The version of nginx hosted on the remote web server is less than 0.7.66 or 0.8.x prior to 0.8.40. It is, therefore, affected by a source code information disclosure vulnerability as noted in the vendor advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

CVE-2015-2263

CVE-2015-2263 affects Cloudera Manager 4.x and 5.x releases (before 5.0.6, 5.1.5, 5.2.5, and 5.3.3 respectively). The root cause is that, during YARN NodeManager startup, the product grants global read permissions to files in its configuration directory. This enables local users to read sensitive...

CVE-2016-2263

CVE-2016-2263 entry is rejected and not associated with a vulnerability.

CVE-2016-2263

...

[SECURITY] [DSA 3003-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3003-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 10, 2014 http://www.debian.org/security/faq -...

Updated ffmpeg packages fix security vulnerabilities

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.0.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

Fedora Update for python-tahrir FEDORA-2014-2263

Check for the Version of python-tahrir OpenVAS Vulnerability Test Fedora Update for python-tahrir FEDORA-2014-2263 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...