RHEL 8 : python-paunch and openstack-tripleo-heat-templates (RHSA-2020:3406)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3406 advisory. Library and utility to launch and manage containers using YAML based configuration data. openstack-tripleo-heat-templates is a collection of OpenStac...

CVE-2020-3406

Cisco SD-WAN vManage Software's web-based management interface is affected by an XSS vulnerability (CVE-2020-3406) caused by improper validation of user-supplied input. An authenticated remote attacker could entice a user to click a crafted link to execute arbitrary script code in the interface c...

CVE-2020-3406 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

alpnesstrail.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1062324 Security Researcher D34D Helped patch 275 vulnerabilities Received 5 Coordinated Disclosure badges Received 12 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting alpnesstrail.ch website and it...

CVE-2015-3406

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:52+00:00| seen| https://t.me/cibsecurity/8445 2024-03-05 09:12:19+00:00| seen| https://t.me/ctinow/200025...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

CVE-2015-3406

CVE-2015-3406 affects the Perl module Module::Signature prior to 0.74, where the PGP signature parsing can cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors. The vulnerability can lead to partial integrity impact without confidentiality or ...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3406-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3406-1 advisory. It was discovered that an out of bounds read vulnerability existed in the associative array implementation in the Linux kernel. A local attacker could us...

Ubuntu: Security Advisory (USN-3406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3406

CVE-2017-3406 is a vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (UI subcomponent). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 . The issue allows an unauthenticated attacker with network access via HTTP to compro...

CVE-2016-3406

CVE-2016-3406 affects Zimbra Collaboration Server prior to 8.7.0, where CSRF vulnerabilities exist in the Client uploader extension and in extension REST handlers (bugs 104294/104456). The impact is that an attacker could hijack a user’s authenticated session. Connected sources confirm the affect...

CVE-2016-3406

Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...

openSUSE Security Update : perl-Module-Signature (openSUSE-2016-61)

This update to perl-Module-Signature 0.79 fixes the following security issues : - More protection of @INC from relative paths. CVE-2015-3409 - Fix GPG signature parsing logic. CVE-2015-3406 - MANIFEST.SKIP is no longer consulted unless --skip is given. CVE-2015-3407 - Properly use open modes to...

Debian DLA-264-1 : libmodule-signature-perl security update

John Lightsey discovered multiple vulnerabilities in Module::Signature, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-3406 Module::Signature could parse the unsigned portion of the SIGNATURE file as...

[SECURITY] [DLA 264-1] libmodule-signature-perl security update

Package : libmodule-signature-perl Version : 0.63-1+squeeze2 CVE ID : CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Debian Bug : 783451 John Lightsey discovered multiple vulnerabilities in Module::Signature, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities an...

DLA-264-1 libmodule-signature-perl - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-2607-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...