Ubuntu: Security Advisory (USN-3047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3047-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3047-1 advisory. Li Qiang discovered that QEMU incorrectly handled 53C9X Fast SCSI controller emulation. A privileged attacker inside the guest could use this...

Fedora Update for qemu FEDORA-2016-a80eab65ba

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4453

The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a VGA command...

CVE-2016-4453

Technical details for CVE-2016-4453 are not publicly provided in the connected documents. The description notes a QEMU vmsvga issue, but no vendor/product/version specifics or fix are included here. Monitor for updates.

OpenEMR globals.php Authentication Bypass (CVE-2015-4453)

An authentication weakness vulnerability exists in OpenEMR, specifically in the globals.php script. The vulnerability is due to variable name collision during HTTP parameter extraction. Successful exploitation will bypass authentication and allow the attacker to gain unauthorized access to the...

CVE-2015-4453

OpenEMR vulnerable component: interface/globals.php. Root cause: a bug in the implementation of the legacy (fake) register_globals handling allows an ignoreAuth=1 parameter to bypass authentication. Affected versions: OpenEMR 2.x, 3.x, and 4.x up to 4.2.0 patch 2. Impact: remote attackers can acc...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

CVE-2014-4453

Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-4453

CVE-2014-4453 affects Apple iOS before 8.1.1 and OS X before 10.10.1. The issue concerns Spotlight/Safari connections to Spotlight Suggestions where a user’s approximate location is included in the initial connection, potentially enabling information disclosure via unspecified vectors. Documents ...

Amazon Linux AMI : dracut (ALAS-2013-257)

It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information. CVE-2012-4453 C Tenabl...

Medium: dracut

Issue Overview: It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information...

CVE-2013-4453

Cross-site scripting XSS vulnerability in templates/login.php in LDAP Account Manager LAM 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2013-4453

CVE-2013-4453 is an XSS vulnerability in LDAP Account Manager (LAM) affecting versions 4.3 and 4.2.1. The flaw resides in templates/login.php where the language parameter can be exploited to inject arbitrary web script or HTML. Public references cite remote execution of script via this parameter,...

Fedora Update for dracut FEDORA-2012-14959

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for dracut FEDORA-2012-14953

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

CVE-2012-4453

CVE-2012-4453 affects dracut: dracut.sh can create initramfs images with world-readable permissions, potentially exposing sensitive information. Public references confirm impact on Red Hat Enterprise Linux 6 and related distributions, with multiple advisories linking this CVE to dracut-related up...

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

CVE-2011-4453

PmWiki 2.x (notably <= 2.2.34) is affected by a Remote PHP Code Injection in scripts/pagelist.php (Pagelist) where a crafted order parameter enables unintended use of PHP create_function, leading to remote code execution. Public references indicate exploits and Metasploit modules exist for PmW...