Security fix for the ALT Linux 8 package git version 2.6.5-alt3

March 17, 2016 Dmitry V. Levin 2.6.5-alt3 - Merged jk/path-name-safety-2.6 fixes CVE‑2016‑2315 and CVE-2016-2324; closes: 31896...

Security fix for the ALT Linux 10 package git version 2.6.5-alt3

March 17, 2016 Dmitry V. Levin 2.6.5-alt3 - Merged jk/path-name-safety-2.6 fixes CVE‑2016‑2315 and CVE-2016-2324; closes: 31896...

SUSE-SU-2016:0798-1 Security update for git

This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...

UBUNTU-CVE-2016-2315

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a 1 long filename or 2 many nested trees, leading to a heap-based buffer overflow...

Oracle Linux 7 : NetworkManager (ELSA-2015-2315)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2315 advisory. - device: reject hop limits that are too low CVE-2015-2924 rh 1217090 Tenable has extracted the preceding description block directly from the Oracle...

Oracle: Security Advisory (ELSA-2015-2315)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2315

Cross-site scripting XSS vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminderpopup action to the default URI...

CVE-2015-2315

The WPML WordPress plugin is affected by an XSS vulnerability in versions prior to 3.1.9, allowing remote attackers to inject arbitrary script via the target parameter in a reminder_popup action to the default URI. Exploitation details indicate the issue arises from the reminder_popup flow and is...

Ubuntu 14.04 LTS : serf vulnerability (USN-2315-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2315-1 advisory. Ben Reser discovered that serf did not correctly handle SSL certificates with NUL bytes in the CommonName or SubjectAltNames fields. A remote attacker could explo...

CVE-2014-2315

The CVE-2014-2315 entry concerns the WordPress plugin “Thank You Counter Button” (version 1.8.7) and is impacted by multiple stored XSS flaws. The vulnerability affects the parameters (thanks_caption, thanks_caption_style, thanks_style) passed to wp-admin/options.php, enabling remote attackers to...

Oracle Linux 5 : python (ELSA-2009-1176)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1176 advisory. - Multiple integer overflows in python core CVE-2008-2315 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Multiple...

Oracle Linux 3 : python (ELSA-2009-1178)

From Red Hat Security Advisory 2009:1178 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

Oracle Linux 4 : python (ELSA-2009-1177)

From Red Hat Security Advisory 2009:1177 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

CVE-2013-2315

EC-CUBE v2.11.0–v2.12.3enP2 suffers an information disclosure vulnerability due to improper input validation in LC_Page_Forgot.php’s password reminder flow. A remote, unauthenticated attacker can craft a request that triggers leakage of sensitive data. The issue is documented across multiple sour...

CVE-2013-2315

data/class/pages/forgot/LCPageForgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request...

Fedora Update for rubygem-rack FEDORA-2013-2315

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Advisory SSA:2008-217-01 python

The remote host is missing an update as announced via advisory SSA:2008-217-01. OpenVAS Vulnerability Test $Id: esoftslkssa200821701.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

CVE-2012-2315

admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action...

CVE-2012-2315

OpenKM 5.1.7 and earlier versions (before 5.1.8-2) suffer a privilege-escillation flaw in admin/Auth: the system does not properly enforce privileges for changing user roles via the userEdit action. Remote authenticated users can assign administrator privileges to arbitrary users. Root cause: imp...

Scientific Linux Security Update : python for SL5.x i386/x86_64

When the assert system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer overflow. The missing check for negative size values meant the Python memory allocator could allocate less memory than expected. This could result in...