Improper validation of certificates when using self-signed certificates - ownCloud

The ownCloud Desktop Client was vulnerable against MITM attacks until version 1.8.2 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

RHEL 5 : mysql (RHSA-2009:1289)

Updated mysql packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. It consists of...

Important: Red Hat Security Advisory: openstack-keystone security update

Updated openstack-keystone packages that fix multiple security issues are now available for Red Hat OpenStack Essex. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2012-4456

CVE-2012-4456 affects OpenStack Keystone: the OS-KSADM/services and tenant APIs in Keystone Essex before 2012.1.2 and Folsom before folsom-2 fail to validate X-Auth-Token, allowing remote attackers to read the roles for an arbitrary user or to get, create, or delete arbitrary services. This is do...

Fedora Update for openstack-keystone FEDORA-2012-13075

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : openstack-keystone-2012.1.2-4.fc17 (2012-13075)

Require authz to update user's tenant CVE-2012-3542 - Delete user tokens after role grant/revoke CVE-2012-4413 - Fails to validate tokens in Admin API CVE-2012-4456 - Fails to raise Unauthorized user error for disabled tenant CVE-2012-4457 Note that Tenable Network Security has extracted the...

Gentoo Security Advisory GLSA 201201-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 201201-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

MySQL < 5.0.89 / 5.1.42 / 5.4.2 / 5.5.1 / 6.0.14 Client XSS

The version of MySQL installed on the remote host is earlier than 5.0.89 / 5.1.42 / 5.4.2 / 5.5.1 / 6.0.14 and thus does not properly encode angle brackets when 'mysql --html' option is used. Depending on how the output of the mysql client command is processed, the user may be vulnerable to...

CVE-2011-4456

CVE-2011-4313 affects ISC BIND 9.0.x–9.6.x, 9.4-ESV–9.4-ESV-R5, 9.6-ESV–9.6-ESV-R5, 9.7.0–9.7.4, 9.8.0–9.8.1, and 9.9.0a1–9.9.0b1. The root cause is the caching of an invalid DNS record in the resolver, which can be exploited remotely via recursive DNS queries to trigger an assertion failure and ...

CVE-2011-4456

...

CVE-2010-4456

Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail...

CVE-2010-4456

CVE-2010-4456 affects Oracle Sun Java System Communications Express 6.2 and 6.3. The vulnerability allows remote attackers to affect integrity via unknown vectors related to Web Mail. The description does not specify concrete exploit details, affected versions beyond 6.2/6.3, or a remediation. No...

RHEL 4 : mysql (RHSA-2010:0110)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server...

MySQL vulnerabilities

No description provided by source. =========================================================== Ubuntu Security Notice USN-897-1 February 10, 2010 mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities CVE-2008-4098, CVE-2008-4456, CVE-2008-7247, CVE-2009-2446, CVE-2009-4019, CVE-2009-4030, CVE-2009-4484...

CVE-2009-4456

CVE-2009-4456 describes an SQL injection in Green Desktiny 2.3.1 (and possibly earlier) via the id parameter in news_detail.php. The vulnerability arises in the affected script’s handling of the id input, enabling remote attackers to execute arbitrary SQL commands. Affected product: Green Desktin...

SLES11: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libmysqlclient15 libmysqlclientr15 mysql mysql-Max mysql-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max mysql-client mysql-devel mysql-shared For more information, please visit the referenced security advisories. More details may also be found b...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max mysql-client mysql-devel mysql-shared For more information, please visit the referenced security advisories. More details may also be found b...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-6360)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 - fix slave reconnect %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE9 Security Update : MySQL (YOU Patch Number 12456)

This update is provided as RPM packages that can easily be installed onto a running system by using the YaST online update module. - the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks...