Oracle: Security Advisory (ELSA-2015-1921)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2015-1919)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1919 advisory. 1:1.8.0.65-0.b17 - October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update...

CentOS Update for java CESA-2015:1919 centos6

Check the version of java SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882303";...

CentOS 6 / 7 : java-1.7.0-openjdk (CESA-2015:1920)

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle: Security Advisory (ELSA-2015-1920)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4806

CVE-2015-4806 is an unspecified issue in the Libraries component of Oracle/OpenJDK/OpenJDK-derived Java runtimes. The impact reported across sources is partial confidentiality and partial integrity (no availability impact stated). Affected releases span multiple OpenJDK versions (including 6u101,...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

CVE-2015-4806

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

CVE-2014-4806

The CVE pertains to IBM Security AppScan Enterprise. On Linux, during installation, a cleartext password is written to a temporary file, enabling local users to read sensitive information. Affected releases include 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 i...

CVE-2013-4806

CVE-2013-0149 centers on improper handling of duplicate Link State ID values in OSPF Link State Advertisements. Connected documents confirm concrete implementations affected: Extreme Networks EXOS (CVE-2013-7309): LSA processing does not consider duplicate LSA IDs, enabling remote impact to routi...

CVE-2011-4806

Affected product: phpAlbum (version 0.4.1.16 and earlier). Vulnerability: Multiple cross-site scripting (XSS) flaws in main.php allow remote injection of arbitrary web script or HTML via (1) var1 and (2) keyword parameters. Root cause: insufficient input sanitization in main.php. Impact: As descr...

CVE-2011-4806

creationtimestamp| type| source ---|---|--- 2011-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18045...

CVE-2010-4806

The authoring tool in IBM Web Content Manager WCM 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges...

CVE-2010-4806

The CVE concerns IBM Web Content Manager (WCM) versions 6.1.5 and 7.0.0.1 before CF003. The underlying issue is a bypass of intended access restrictions on draft creation, achieved by remote authenticated users who leverage certain resource editor privileges. Affected component/process appears to...

CVE-2009-4806

admin/saveuser.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote attackers to read or modify the administrator's credentials via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2009-4806

admin/saveuser.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote attackers to read or modify the administrator's credentials via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2009-4806

CVE-2009-4806 affects Digital Interchange Document Library 1.0.1; the admin/save_user.asp endpoint does not require administrative authentication, allowing remote attackers to read or modify the administrator credentials via unspecified vectors. This yields partial confidentiality and integrity i...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

CVE-2009-4806

creationtimestamp| type| source ---|---|--- 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8130...

CVE-2008-4806

IBM Lotus Connections 2.x is affected by multiple SQL injection vulnerabilities in unspecified components, exploitable via the sortField parameter to allow remote execution of arbitrary SQL commands. Impact includes potential data exposure or modification with partial confidentiality/integrity/av...