Oracle Linux 7 : tomcat (ELSA-2014-1034)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1034 advisory. - Resolves: CVE-2013-4590 - Resolves: CVE-2014-0119 - Related: CVE-2014-0099 incrementing release so rpmdiff doesn't complain about - Resolves: CVE-2014-0099 Fi...

tomcat security update

0:7.0.42-8 - Resolves: CVE-2013-4590 - Resolves: CVE-2014-0119 0:7.0.42-7 - Related: CVE-2014-0099 incrementing release so rpmdiff doesn't complain about - no new entries in the changelog 0:7.0.42-6 - Resolves: CVE-2014-0099 Fix possible overflow when parsing - long values from byte array -...

CVE-2014-4590

Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...

CVE-2014-4590

The CVE-2014-4590 entry relates to a Cross-Site Scripting (XSS) vulnerability in the WordPress WP Microblogs plugin (version 0.4.0 and earlier). The issue is triggered in get.php via the oauth_verifier parameter, allowing remote attackers to inject arbitrary JavaScript/HTML. Affected product: WP ...

CVE-2013-4590 vulnerability with Tomcat 7.0.42 shipped with Crowd 2.7.2

Crowd 2.7.2 is shipped with Tomcat 7.0.42, which is susceptible to CVE-2013-4590|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4590 h3.Workaround Deploy Crowd WAR instead, with Tomcat 7.0.50 or above. Instructions here:...

CVE-2013-4590

CVE-2013-4590 affects Apache Tomcat prior to 6.0.39, 7.x prior to 7.0.50, and 8.x prior to 8.0.0-RC10. The issue is an XML External Entity (XXE) vulnerability that lets an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld document containing an external entity declar...

CVE-2013-4590

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, .jspx, .tagx, or .tld XML document containing an external entity declaration ...

Apache Tomcat 7.0.0 < 7.0.50 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.50. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.50security-7 advisory. - Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in...

Fixed in Apache Tomcat 7.0.50

Note: The issues below were fixed in Apache Tomcat 7.0.48 but the release votes for 7.0.48 to 7.0.49 did not pass. Therefore, although users must download 7.0.50 to obtain a version that includes fixes for these issues, versions 7.0.48 to 7.0.49 are not included in the list of affected versions...

Fixed in Apache Tomcat 8.0.0-RC10

Note: The issue below was fixed in Apache Tomcat 8.0.0-RC6 but the release votes for 8.0.0-RC6 to 8.0.0-RC9 did not pass. Therefore, although users must download 8.0.0-RC10 to obtain a version that includes a fix for this issue, versions 8.0.0-RC6 to 8.0.0-RC9 are not included in the list of...

Fedora Update for openstack-keystone FEDORA-2013-4590

Check for the Version of openstack-keystone OpenVAS Vulnerability Test Fedora Update for openstack-keystone FEDORA-2013-4590 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2012-4590

CVE-2012-4590 describes multiple XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager (EMM) prior to version 10.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection HTTP variables. Exploitati...

CVE-2011-4590

CVE-2011-4590 affects Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3. The web services login path fails to properly consider maintenance-mode state and account attributes, allowing remote authenticated users to bypass access restrictions by connecting to a webservice server. Impact per the entr...

Fedora Update for moodle FEDORA-2011-16833

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2011-16903

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : moodle-2.0.6-1.fc16 (2011-16833)

CVE-2011-4581 CVE-2011-4582 CVE-2011-4583 CVE-2011-4584 CVE-2011-4585 CVE-2011-4586 CVE-2011-4587 CVE-2011-4588 CVE-2011-4589 CVE-2011-4590 CVE-2011-4591 CVE-2011-4592 CVE-2011-4593 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 15 : moodle-1.9.15-1.fc15 (2011-16903)

CVE-2011-4581 CVE-2011-4582 CVE-2011-4583 CVE-2011-4584 CVE-2011-4585 CVE-2011-4586 CVE-2011-4587 CVE-2011-4588 CVE-2011-4589 CVE-2011-4590 CVE-2011-4591 CVE-2011-4592 CVE-2011-4593 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

CVE-2010-4590

CVE-2010-4590 describes a Cross-site scripting (XSS) vulnerability in the HTTP Access Services (HTTP-AS) component of IBM Lotus Mobile Connect (LMC) prior to version 6.1.4. The flaw affects the Connection Manager and allows remote attackers to inject arbitrary web script or HTML via unspecified v...

CVE-2009-4590

Cross-site scripting XSS vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4590

Cross-site scripting XSS vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...