RHEL 6 : openslp (RHSA-2018:2308)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2308 advisory. - openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 Note that Nessus has no...

CVE-2016-2308

The CVE-2016-2308 vulnerability affects American Auto-Matrix Building Automation Front-End Solutions (Aspect-Nexus and Aspect-Matrix) applications prior to version 3.0.0, where passwords are stored in clear text. This enables a remote attacker to read sensitive information from a file on the host...

Fedora Update for php-symfony FEDORA-2015-5504

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2308

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...

CVE-2015-2308

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...

CVE-2015-2308

Symfony 2.x vulnerable to PHP code execution via HTTP cache HttpCache Eval injection. Affected: HttpKernel HttpCache class when ESI is enabled. Root cause: language="php" attribute in SCRIPT elements not escaped before eval(). Affected versions: Symfony 2.0.x–2.6.x with fixes in 2.3.27, 2.5.11, a...

CVE-2015-2308

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...

Fedora Update for php-symfony FEDORA-2015-9025

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-symfony FEDORA-2015-9039

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : php-symfony-2.5.11-1.fc22 (2015-5504)

2.5.11 2015-04-01 - security 14167 CVE-2015-2308 nicolas-grekas - security 14166 CVE-2015-2309 neclimdul Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Fedora 21 : php-symfony-2.5.11-1.fc21 (2015-5457)

2.5.11 2015-04-01 - security 14167 CVE-2015-2308 nicolas-grekas - security 14166 CVE-2015-2309 neclimdul Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Fedora 20 : php-symfony-2.5.11-1.fc20 (2015-5464)

2.5.11 2015-04-01 - security 14167 CVE-2015-2308 nicolas-grekas - security 14166 CVE-2015-2309 neclimdul Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Esi Code Injection

More info at https://symfony.com/cve-2015-2308...

Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2308-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2308-1 advisory. Adam Langley and Wan-Teh Chang discovered that OpenSSL incorrectly handled certain DTLS packets. A remote attacker could use this issue to cause OpenSSL ...

Ubuntu: Security Advisory (USN-2308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2308

CVE-2013-2308 affects SoftBank Online Service Gate components: the OWA Helper and OSG Lite . The vulnerability allows remote authenticated users to obtain their own Office 365 passwords, thereby bypassing a platform restriction, via unspecified vectors. This is documented in multiple sources (NVD...

CVE-2012-2308

CVE-2012-2308 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed module Taxonomy Grid: Catalog for Drupal 6.x-1.6 and earlier. The issue arises because user-supplied text is not properly filtered, allowing remote authenticated users with certain permissions to inject a...

CVE-2012-2308

Cross-site scripting XSS vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2308

Technical details for CVE-2011-2308 are not publicly provided in the supplied documents; no affected product/version or root cause is specified here. Monitor for updates.

Debian: Security Advisory (DSA-2308-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...