Fedora 24 : cryptopp-5.6.3-3.fc24 (2016-96b60bdb96)

Fix for CVE-2016-3995 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

CVE-2015-3995

CVE-2015-3995 concerns SAP HANA DB 1.00.73.00.389160 (NewDB100_REL). A remote, authenticated user can read arbitrary files via an IMPORT FROM SQL statement due to an improper access control weakness. Onapsis’ advisory (linked to CVE-2015-3995) documents the vulnerability class as Improper Access ...

CVE-2014-3995

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

CVE-2014-3995

Djblets gravatars.py XSS (CVE-2014-3995) affects Djblets for Django via user display name. The vulnerable code paths are in gravatars/templatetags/gravatars.py, with flaws present in versions before 0.7.30 and in 0.8.x before 0.8.3. Exploitation allows remote attackers to inject arbitrary web scr...

CVE-2013-3995

IBM InfoSphere BigInsights (versions 1.1–2.1) contains a cross-site scripting (XSS) vulnerability (CVE-2013-3995) that could allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The IBM advisory for related CVEs notes fixes for version 2.1 (2.1.0.1 Fix ...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaFirefox: update to Firefox 16.0.1 (important)

The Mozilla suite received following security updates bnc783533: Mozilla Firefox was updated to 16.0.1. Mozilla Seamonkey was updated to 2.13.1. Mozilla Thunderbird was updated to 16.0.1. Mozilla XULRunner was updated to 16.0.1. MFSA 2012-88/CVE-2012-4191 bmo798045 Miscellaneous memory safety...

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Windows)

The host is installed with Mozilla firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvuln01oct12win.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities-01 Windows Authors: Arun Kallavi Copyright: Copyright...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln01oct12win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities-01 Windows Authors: Arun Kallavi Copyright: Copyrigh...

CentOS Update for thunderbird CESA-2012:1351 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 / 6 : thunderbird (CESA-2012:1351)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for firefox CESA-2012:1350 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3995

CVE-2012-3995 affects Mozilla Firefox and related Mozilla applications. The vulnerability arises from the IsCSSWordSpacingSpace function in Firefox (and Firefox ESR 10.x, Thunderbird, SeaMonkey as listed) where an out-of-bounds read could be exploited to run arbitrary code or trigger a denial-of-...

thunderbird security update

CentOS Errata and Security Advisory CESA-2012:1351 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring...

RHEL 6 : thunderbird (RHSA-2012:1351)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1351 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2011-3995

CVE-2011-3995 affects Twilight Frontier Touhou Hisouten (Ver 1.06 and earlier). The vulnerability arises in processing network traffic, allowing remote attackers to cause a denial-of-service (daemon crash). Public sources (JVN/JVNDB and NVD) describe an unspecified DoS condition triggered by netw...

CentOS Update for mikmod CESA-2010:0720 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11 Security Update : libmikmod (SAT Patch Number 2354)

Specially crafted 'Impulse Tracker' and 'Ultratracker' files could cause a heap based buffer overflow in libmikmod. Attackers could exploit that to crash or potentially execute code in applications linking against libmikmod. CVE-2009-3995 / CVE-2009-3996 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : libmikmod (ZYPP Patch Number 7004)

Specially crafted 'Impulse Tracker' and 'Ultratracker' files could cause a heap based buffer overflow in libmikmod. Attackers could exploit that to crash or potentially execute code in applications linking against libmikmod. CVE-2009-3995 / CVE-2009-3996 %NASLMINLEVEL 70300 C Tenable Network...