CentOS 5 : java-1.7.0-openjdk (CESA-2014:0407)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

java security update

CentOS Errata and Security Advisory CESA-2014:0406 Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring Syste...

Buffer overflow

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402...

CVE-2014-2402

CVE-2014-2402 is listed across IBM advisories as an Oracle Java SE vulnerability (April 2014 CPU) affecting IBM SDK/JAVA components shipped with IBM products (e.g., IBM Forms Viewer, WebSphere, InfoSphere Streams). The connected docs confirm the CVE family includes multiple libraries/ deployment ...

Oracle Java SE Multiple Vulnerabilities (April 2014 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 8 Update 5, 7 Update 55, 6 Update 75, or 5 Update 65. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAX-WS -...

CVE-2013-2402

Technical details about CVE-2013-2402 are not publicly available in the provided documents; no specific affected product version, root cause, or remediation information is included. Monitor for updates from official advisories.

Fedora Update for wordpress FEDORA-2012-6494

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : wordpress-3.3.2-2.fc17 (2012-6494)

Uploading files related security issues were addressed by the upstream upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 15 : wordpress-3.3.2-2.fc15 (2012-6511)

Uploading files related security issues were addressed by the upstream upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for wordpress FEDORA-2012-6511

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : wordpress-3.3.2-2.fc16 (2012-6542)

Uploading files related security issues were addressed by the upstream upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : wordpress -- multiple vulnerabilities (b384cc5b-8d56-11e1-8d7b-003067b2972c)

Wordpress reports : External code has been updated to non-vulnerable versions. In addition the following bugs have been fixed : - Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances. -...

CVE-2012-2402

wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors...

CVE-2012-2402

CVE-2012-2402 affects WordPress up to version 3.3.1 (patched in 3.3.2). The flaw is in wp-admin/plugins.php, where remote authenticated site administrators could bypass access restrictions and deactivate network-wide plugins via unspecified vectors. The OpenVAS/Nessus/DSA references confirm this ...

Debian: Security Advisory (DSA-2402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2402

CVE-2011-2402 affects HP Network Automation versions 7.2x, 7.5x, 7.6x, 9.0 and 9.10 with a cross-site scripting (XSS) flaw reported. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Seebug notes that exploitation could enable attackers to o...

HP Network Automation CVE-2011-2402跨站脚本漏洞

Bugtraq ID: 48922 CVE ID：CVE-2011-2402 HP Network Automation是一款自动化网络配置管理工具。 运行在Linux, Solaris和Windows平台下的HP Network Automation存在安全漏洞，允许攻击者进行跨站脚本攻击，攻击者可以获得敏感信息或劫持用户会话。 HP Network Automation 9.10 HP Network Automation 9.0 HP Network Automation 7.6 HP Network Automation 7.5 HP Network Automation 7.2...

CVE-2010-2402

CVE-2010-2402 affects Oracle PeopleSoft Enterprise PeopleTools, version 8.49.27. In the Oracle CPU July 2010 advisory, the risk matrix shows a Network-accessible web component (HTTP) that requires a valid session (authenticated) to exploit. The vulnerability impact is partial confidentiality and ...

CVE-2009-2402

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355...

CVE-2009-2402

CVE-2009-2402 affects PHPEcho CMS 2.0-rc3 in the forum module. The vulnerability is a SQL injection in index.php, exploitable via the id parameter in a thread action, allowing remote execution of arbitrary SQL commands. The description indicates a different vector from CVE-2008-0355, and CVE refe...