Kernel security update: Virtuozzo ReadyKernel patch 15.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

The cumulative Virtuozzo ReadyKernel patch updated with a security fix. The patch applies to Virtuozzo versions 7.0.0, 7.0.1, and 7.0.3. Vulnerability id: CVE-2017-2647 A flaw was discovered in the Linux kernel's key subsystem. Invoking the requestkey system call with a specially crafted set of...

Kernel security update: new kernel 2.6.32-042stab120.20, Virtuozzo 6.0 Update 12 Hotfix 6 (6.0.12-3673)

This update provides the new Virtuozzo 6.0 kernel 2.6.32-042stab120.20 based on the Red Hat Enterprise Linux 6.8 kernel 2.6.32-642.6.1.el6. The new kernel provides a security fix. Vulnerability id: CVE-2017-2647 A flaw was discovered in the Linux kernel's key subsystem. Invoking the requestkey...

CVE-2015-2647

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect...

CVE-2015-2647

CVE-2015-2647 affects Oracle Enterprise Manager Grid Control and related EM components (EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5/6/7; EM DB Control 11.1.0.7, 11.2.0.3/4) as described in the SUSE security bulletin. The vulnerability is located in the Content Management subcomponent and...

CVE-2015-2647

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect...

HP Operations Agent - Cross-Site Scripting iFrame Injection

!/usr/bin/python Exploit Title: HP Operations Agent / HP Communications Broker Remote XSS iFrame Injection Date: 10/16/2014 Exploit Author: Matt Schmidt Syph0n Vendor Homepage: www.hp.com Version: HP Operations Manager/Operations Agent / OpenView Communications Broker 11.14 Tested on: Windows 7,...

CVE-2014-2647

creationtimestamp| type| source ---|---|--- 2014-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35076...

CVE-2014-2647

CVE-2014-2647 is a remote cross-site scripting (XSS) vulnerability in HP OpenView/OpenView HP Operations Broker/HP Operations Agent (HP Operations Manager) for versions prior to 11.14. The weakness allows an attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface...

[security bulletin] HPSBMU03126 rev.1 - HP Operations Manager (formerly OpenView Communications Broker), Remote Cross-site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04472444 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04472444 Version: 1 HPSBMU03126 rev....

Debian DSA-2647-1 : firebird2.1 - buffer overflow

A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2647. The text itse...

Debian: Security Advisory (DSA-2647-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2647

CVE-2012-2647 affects Yahoo! Toolbar for Chrome and Safari up to version 1.0.0.5. The vulnerability allows remote attackers to modify the toolbar’s configured search URL and intercept search terms via a specially crafted web page. Root cause: improper handling of the search URL/input leads to lea...

CVE-2011-2647

Kiwi before 3.74.2 contains a remote code execution vulnerability exploitable via a crafted archive name in the list of testdrive modified files, as used in SUSE Studio 1.1 before 1.1.4. The issue is documented in multiple sources (SUSE/SUSE CVE, NVD) with the affected component being Kiwi, and t...

SuSE 11 / 11.1 Security Update : popt (SAT Patch Numbers 2647 / 2648)

This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bugs were fixed : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used bnc536256 -...

Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-2647

Google Chrome

CVE-2009-2647

CVE-2009-2647 affects Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 prior to Critical Fix 9.0.0.463. The vulnerability is described as unspecified and allows remote attackers to disable the protection provided by Kaspersky software via unknown attack vectors unrelated to external...

CVE-2008-2647

creationtimestamp| type| source ---|---|--- 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5716...

CVE-2007-2647

CVE-2007-2647 affects Monalbum 0.8.7. A static code injection vulnerability in admin/admin_configuration.php allows remote authenticated users to inject arbitrary PHP code into conf/config.inc.php by manipulating one of 28 parameters (e.g., gadm_pass, gadm_user, gcfgBase, etc.). The NVD entry doc...

CVE-2006-2647

The CVE-2006-2647 entry concerns an untrusted search path vulnerability in IBM AIX 5.1, 5.2 and 5.3, specifically tied to the update_flash component. The underlying issue enables a local attacker to run arbitrary commands via vectors involving the lsmcode utility (and potentially other commands)....