[SECURITY] [DSA 3765-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3765-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2017 https://www.debian.org/security/faq -...

ESXi 5.0 / 5.1 / 5.5 / 6.0 Multiple Vulnerabilities (VMSA-2016-0010) (remote check)

The remote VMware ESXi host is version 5.0, 5.1, 5.5, or 6.0 and is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files fr...

CVE-2016-5331

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2016-5331

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2016-5331

CVE-2016-5331 describes a CRLF/HTTP header injection vulnerability in VMware vCenter Server 6.0 (before U2) and ESXi 6.0. The underlying issue is CRLF injection that allows remote attackers to manipulate HTTP headers and perform HTTP response splitting via unspecified vectors. Impact is stated as...

VMware vSphere Hypervisor (ESXi) HTTP Response Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-063 Product: VMware vSphere Hypervisor ESXi Manufacturer: VMware, Inc. Affected Versions: VMware ESXi 6.0.0 build 3380124 Update 1 VMware vCenter Server 6.0 U2 Tested Versions: VMware ESXi 6.0.0 build 3380124 Update 1...

Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-5331

Moodle 2.9.x before 2.9.3 is affected: the messaging API flow fails to validate the contact list before authorizing message transmission, enabling remote authenticated users to bypass access controls and conduct spam via the messaging API. The issue is documented across multiple sources (NVD/NVD-...

Fedora Update for moodle FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5331

Cross-site scripting XSS vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5331

The CVE-2014-5331 entry concerns the Aflax JavaScript library, which contains a cross-site scripting (XSS) vulnerability. Aflax enables JavaScript to interact with the Adobe Flash runtime, and the flaw allows remote attackers to cause arbitrary scripts to run in the user’s browser via unspecified...

Adobe Flash Player Type Confusion Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...

openSUSE Security Update : flash-player (openSUSE-SU-2013:1915-1)

This update fixes the following security issues with flash-player : - Security update to 11.2.202.332: bnc854881 - APSB13-28, CVE-2013-5331, CVE-2013-5332 - Prevents possible remote code execution! %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : pam (openSUSE-SU-2011:1208-1)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed CVE-2010-3316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Adobe Flash Player Type Confusion Remote Code Execution Exploit

This Metasploit module exploits a type confusion vulnerability found in the ActiveX component of Adobe Flash Player. This vulnerability was found exploited in the wild in November 2013. This Metasploit module has been tested successfully on IE 6 to IE 10 with Flash 11.7, 11.8 and 11.9 prior to...

Adobe Flash Player Type Confusion Arbitrary Code Execution (APSB13-28; CVE-2013-5331)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

CVE-2013-5331

creationtimestamp| type| source ---|---|--- 2014-01-13 09:01:31+00:00| seen| MISP/52d3ab1a-17b4-4be0-a423-f046950d2109 2014-01-15 15:11:40+00:00| seen| MISP/52d6a4ff-c254-4696-a8aa-19e9ac1d4fa4 2014-02-17 10:36:36+00:00| seen| MISP/5301e1b4-38e0-4603-a6ec-8454950d2109 2014-04-29 00:00:00+00:00|...

Adobe Flash Player Multiple Vulnerabilities-01 (Dec 2013) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8639 / 8640)

This update fixes the following security issues with flash-player : - flash-plugin: multiple code execution flaws APSB13-28. bnc854881 - These updates resolve a type confusion vulnerability that could lead to code execution. CVE-2013-5331 - These updates resolve a memory corruption vulnerability...