91 matches found
CVE-2016-4312
CVE-2016-4312 affects WSO2 Identity Server 5.1.0 prior to WSO2-CARBON-PATCH-4.4.0-0231. The issue is an XML External Entity (XXE) vulnerability in the XACML flow feature that allows remote authenticated users with XACML access to read arbitrary files, cause a denial of service, perform SSRF, or i...
CentOS 7 : kernel (CESA-2016:2574)
"An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2016:2574 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
RHEL 7 : kernel-rt (RHSA-2016:2584)
"An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0100)
The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0100 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...
SUSE-SU-2016:2245-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-3955: The usbiprecvxbuff function in drivers/usb/usbip/usbipcommon.c in the Linux kernel allowed remote attackers to cause a denial of service...
CVE-2016-4312
creationtimestamp| type| source ---|---|--- 2016-08-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40239...
WSO2 Identity Server 5.1.0 XML Injection
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt + ISR: ApparitionSec Vendor: ============= www.wso2.com Product: ============================ Wso2 Identity Server v5.1.0...
OracleVM 3.3 : kernel-uek (OVMSA-2016-0053)
The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279020 CVE-2016-0758 - net: add validation for the socket syscall protocol argument Hannes Frederic...
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-118.6.2 - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279020 CVE-2016-0758 - net: add validation for the socket syscall protocol argument Hannes Frederic Sowa Orabug: 23267997 CVE-2015-8543 CVE-2015-8543 - ipv6: addrconf:...
OracleVM 3.4 : kernel-uek (OVMSA-2016-0052)
The remote OracleVM system is missing necessary patches to address critical security updates : - move part of fix for 'unix: properly account for FDs passed over unix sockets' Chuck Anderson Orabug: 23294626 CVE-2013-4312 CVE-2013-4312 - KEYS: Fix ASN.1 indefinite length object parsing This fixes...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3559)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3559 advisory. - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279022 CVE-2016-0758 - unix: properly account...
CentOS 6 : kernel (CESA-2016:0855)
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Unbreakable Enterprise kernel security update
kernel-uek 4.1.12-37.3.1 - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279022 CVE-2016-0758 - uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers Todd Vierling Orabug: 23270829 - unix: properly account for FDs passed over un...
Ubuntu 12.04 LTS : linux vulnerabilities (USN-2967-1)
It was discovered that the Linux kernel did not properly enforce rlimits for file descriptors sent over UNIX domain sockets. A local attacker could use this to cause a denial of service. CVE-2013-4312 Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not...
Ubuntu: Security Advisory (USN-2967-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2967-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly enforce rlimits for file descriptors sent over UNIX domain sockets. A local attacker could use this to cause a denial of service. CVE-2013-4312 Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not...
Ubuntu: Security Advisory (USN-2929-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...