CVE-2017-2616

A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions...

CentOS Update for openssl CESA-2015:2616 centos5

Check the version of openssl SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882339";...

Oracle: Security Advisory (ELSA-2015-2616)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : openssl (ELSA-2015-2616)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2616 advisory. - fix CVE-2014-3570 - Bignum squaring may produce incorrect results - fix CVE-2014-3571 - DTLS segmentation fault in dtls1getrecord - fix CVE-2014-3572 - ECDHE...

Re: CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android

CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Cordova Android File Transfer Plugin 1.2.1 and below Description: Android applications built with the Cordova framework...

CVE-2015-2616

CVE-2015-2616 : The connected CNVD entry describes an Oracle Solaris cluster issue within the DevFS component that could be exploited by a local attacker to crash the system, i.e., a Denial of Service. The Solaris Platform (Oracle Solaris Cluster DevFS) is the affected area; no details on vulnera...

Ubuntu: Security Advisory (USN-2616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[security bulletin] HPSBMU03064 rev.1 - HP Universal CMDB, Remote Information Disclosure, Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04357076 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04357076 Version: 1 HPSBMU03064 rev....

CVE-2014-2616

CVE-2014-2616 affects HP Universal CMDB versions 10.01 and 10.10. The vulnerability allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors (ZDI-CAN-2091); CVSS v2 base score 7.5 (NETWORK, LOW access complexity, NO authentication). HP’s security bulle...

openSUSE Security Update : opera (openSUSE-SU-2011:0790-1)

opera 11.50 has been released, fixing numerous vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE Security Update : opera (openSUSE-SU-2011:0790-1)

opera 11.50 fixes several security vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-485...

Oracle Linux 5 : httpd (ELSA-2013-0130)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0130 advisory. - add security fix for CVE-2008-0456 - add security fix for CVE-2012-2687 850794 Tenable has extracted the preceding description block directly from th...

CVE-2013-2616

lib/minimagick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2616

lib/minimagick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2616

The CVE-2013-2616 entry affects the MiniMagick Ruby gem, specifically lib/mini_magick.rb in version 1.3.1. The vulnerability arises when handling a URL containing shell metacharacters, enabling a context-dependent attacker to execute arbitrary commands, i.e., an arbitrary command injection via cr...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2616. Reason: This candidate is a duplicate of CVE-2013-2616. Notes: All CVE users should reference CVE-2013-2616 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Debian DSA-2616-1 : nagios3 - buffer overflow in CGI scripts

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Opera Browser Multiple Vulnerabilities July-11 (Mac OS X)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnmacosxjuly11.nasl 5956 2017-04-14 09:02:12Z teissa $ Opera Browser Multiple Vulnerabilities July-11 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Opera Browser Multiple Vulnerabilities (Jul 2011) - Linux

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache HTTP Server 403 Error Page UTF-7 Encoded XSS

According to its banner, the version of Apache HTTP Server running on the remote host can be used in cross-site scripting XSS attacks. Making a specially crafted request can inject UTF-7 encoded script code into a 403 response page, resulting in XSS attacks. This is actually a web browser...