[SECURITY] Fedora 23 Update: kernel-4.4.4-301.fc23

The kernel meta package...

Fedora 23 : kernel-4.4.2-301.fc23 (2016-7e12ae5359)

This is an incremental update over 4.4.2-300 which contains two fixes fix for AMD IOMMU warnings use after free in USB ---- The 4.4.2 update contains a number of important updates across the kernel tree. Note that Tenable Network Security has extracted the preceding description block directly fro...

[SECURITY] Fedora 23 Update: kernel-4.4.2-301.fc23

The kernel meta package...

[SECURITY] Fedora 23 Update: kernel-4.3.3-301.fc23

The kernel meta package...

Amazon Linux: Security Advisory (ALAS-2014-301)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-7282

Name of the Vulnerable Software and Affected Versions 404-to-301 plugin versions prior to 2.0.3 Description The issue is related to SQL injection in the 404-to-301 plugin for WordPress. Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue...

wordreference.com XSS vulnerability

Vulnerable URL: http://www.wordreference.com/docs/report.ad.aspx?country=x=1" onmouseover="prompt/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Fedora 21 : kernel-3.16.2-301.fc21 (2014-10693)

Fix CVE-2014-3631 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Free Download Manager 3.x Buffer Overflow Vulnerability

Free Download Manager versions 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and possibly others are affected by a stack-based buffer overflow vulnerability. Proof of concept code included. 1. ADVISORY INFORMATION ----------------------- Product: Free Download Manager Vendor URL:...

Amazon Linux AMI : gnutls (ALAS-2014-301)

It was discovered that GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification. An attacker could use this flaw to create a specially crafted certificate that could be accepted by...

Fedora 20 : kernel-3.11.10-301.fc20 (2013-22818)

Fixes for SELinux issues and crashes related to bigkey krb functionality. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

HTTP Request Hijacking Attacks Threaten Mobile Apps

Thousands of mobile apps developed for the Apple iOS platform can be forced to display phony, even malicious content, because of a vulnerability that allows an attacker to redirect traffic to a third-party site and persistently serve content from that location. Researchers from Israeli mobile...

Fedora 20 : kernel-3.11.2-301.fc20 (2013-17982)

The 3.11.2 update contains a large number of fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : kernel-3.9.9-301.fc19 (2013-12339)

Upstream stable release 3.9.9 contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 19 Update: kernel-3.9.9-301.fc19

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

global_redirect

This plugin finds global redirection vulnerabilities. This kind of bugs are used for phishing and other identity theft attacks. A common example of a global redirection would be a script that takes a "url" parameter and when requesting this page, a HTTP 302 message with the location header to the...

Slackware Advisory SSA:2010-301-02 mozilla-firefox

The remote host is missing an update as announced via advisory SSA:2010-301-02. OpenVAS Vulnerability Test $Id: esoftslkssa201030102.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Confluence does not respect HTTPS in Server Base URL when 301 redirecting

We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...

Confluence does not respect HTTPS in Server Base URL when 301 redirecting

We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...

Confluence does not respect HTTPS in Server Base URL when 301 redirecting

We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...