Ubuntu 14.04 LTS : Oxide vulnerability (USN-2905-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2905-1 advisory. A security issue was discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypas...

CVE-2015-2905

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2905

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2905

The CVE-2015-2905 entry affects the Actiontec GT784WN Wireless N DSL Modem. The vulnerability is a Cross-Site Request Forgery (CSRF) in firmware versions prior to NCS01-1.0.13, which enables a remote attacker to hijack authentication or an intranet connection for arbitrary users. Affected device:...

Actiontec GT784WN Wireless N DSL Modem contains multiple vulnerabilities

Overview Actiontec GT784WN Wireless N DSL Modem, versions NCS01-1.0.12 and earlier, contains multiple vulnerabilities. Description CWE-259: Use of Hard-coded Password - CVE-2015-2904Actiontec GT784WN Wireless N DSL Modem contains multiple hard-coded credentials that enable a user to log into the...

GLSA-201412-49 : fish: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-49 fish: Multiple vulnerabilities Multiple vulnerabilities have been discovered in fish. Please review the CVE identifiers referenced below for details. Impact : A local attacker may be able to gain escalated privileges or...

Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...

Fedora Update for fish FEDORA-2014-9402

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : fish-2.1.0-11.fc19 (2014-9402)

Improve fixes for CVE-2014-2905 and CVE-2014-2914 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for fish FEDORA-2014-9407

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mambo Cache_Lite Class mosConfig_absolute_path Remote File Include

No description provided by source. $Id: mambocachelite.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Fedora Update for fish FEDORA-2014-5783

Check for the Version of fish OpenVAS Vulnerability Test Fedora Update for fish FEDORA-2014-5783 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for fish FEDORA-2014-5783

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fish FEDORA-2014-5794

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : fish-2.1.0-9.fc19 (2014-5783)

CVE-2014-2905 is severe. Apparently requesting stable instead of testing doesn't work. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 20 : fish-2.1.0-9.fc20 (2014-5794)

Requesting a direct push to stable. CVE-2014-2905 in particular is severe. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

CVE-2014-2905

fish aka fish-shell 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions...

CVE-2014-2905

fish aka fish-shell 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions...

CVE-2014-2905

CVE-2014-2905 affects fish-shell (fish) versions prior to 2.1.1, where credentials are not properly checked over the universal variable socket (UNIX domain socket at /tmp/fishd.socket.user), enabling local privilege escalation. The root cause is improper validation of credentials when communicati...

Debian Security Advisory DSA 2905-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2014-1716 A cross-site scripting issue was discovered in the v8 javascript library. CVE-2014-1717 An out-of-bounds read issue was discovered in the v8 javascript library. CVE-2014-1718 Aaron Staple discovered an integer...