January 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-02: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936, CVE-2017-293...

CVE-2016-2934

IBM BigFix Remote Control is affected by CVE-2016-2934: an XSS vulnerability in versions before 9.1.3 that allows an unauthenticated attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface. Remediation: upgrade to 9.1.3 or later to mitigate.

Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-2934-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2934-1 advisory. Bob Clary, Christoph Diehl, Christian Holler, Andrew McCreight, Daniel Holbert, Jesse Ruderman, and Randell Jesup discovered multiple memory...

MediaWiki < 1.19.24 / 1.23.9 / 1.24.2 Multiple Vulnerabilities

According to its version number, the MediaWiki application running on the remote host is affected by the following vulnerabilities : - An input validation error exists related to handling API errors that allows reflected cross-site scripting attacks. CVE-2014-9714, CVE-2015-2941 - An input...

OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

[ MDVSA-2015:200 ] mediawiki

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:200 http://www.mandriva.com/en/support/security/ Package : mediawiki Date : April 10, 2015 Affected: Business Server 1.0 Problem Description: Updated mediawiki packages fix security vulnerabilities: In...

CVE-2015-2934

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xmlparse function does not expand entities, which allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...

CVE-2015-2934

MediaWiki vulnerability CVE-2015-2934 affects MediaWiki versions before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2. The issue arises from the Zend xml_parse function not expanding entities, enabling remote attackers to inject arbitrary web script or HTML via a crafted SVG file. Impact ...

CVE-2015-2934

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xmlparse function does not expand entities, which allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...

openSUSE Security Update : xen (openSUSE-2012-404)

This update of XEN fixed multiple security flaws that could be exploited by local attackers to cause a Denial of Service or potentially escalate privileges. Additionally, several other upstream changes were backported. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : xen (openSUSE-SU-2012:0886-1)

This update of XEN fixed multiple security flaws that could be exploited by local attackers to cause a Denial of Service or potentially escalate privileges. Additionally, several other upstream changes were backported. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian: Security Advisory (DSA-2934-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2934

CVE-2014-2934 involves multiple SQL injection vulnerabilities in Caldera 9.20. The affected components are Caldera 9.20’s web interface, specifically the costview2/jobs.php and costview2/printers.php scripts, where the tr parameter is improperly sanitized, enabling remote attackers to execute arb...

CVE-2014-2934

creationtimestamp| type| source ---|---|--- 2014-05-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39173 2014-05-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39174...

CVE-2013-2934

Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 is affected. The issue is that web services access is not properly restricted, with unspecified impact and attack vectors. Root cause details are not provided beyond this restriction gap. No exploitation or specific ...

Oracle Linux 5 : kernel (ELSA-2012-1061)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1061 advisory. - xen x8664: check address on trap handlers or guest callbacks Paolo Bonzini 813430 813431 CVE-2012-0217 - xen x8664: Do not execute sysret with a non-canonical...

Oracle Linux 5 : kernel (ELSA-2012-0721-1)

From Red Hat Security Advisory 2012:0721 : Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

Fedora Update for xen FEDORA-2013-10929

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-10929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for xen FEDORA-2013-7432

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-7432 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xen FEDORA-2013-6723

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...