Fedora 19 : check-mk-1.2.4p5-1.fc19 (2014-11082)

New upstream release providing many security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : check-mk-1.2.4p5-1.fc20 (2014-10972)

New upstream release providing many security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 21 : check-mk-1.2.4p5-1.fc21 (2014-11160)

New upstream release that provides multiple security files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Deutsche Telekom CERT Advisory [DTC-A-20140820-001] check_mk vulnerabilities

Deutsche Telekom CERT Advisory DTC-A-20140820-001 Summary: Several vulnerabilities were found in checkmk prior versions 1.2.4p4 and 1.2.5i4. The vulnerabilities are: 1 - Reflected Cross-Site Scripting XSS 2 - write access to config files .mk files 3 - arbitrary code execution Recommendations:...

CVE-2014-5338

Multiple cross-site scripting XSS vulnerabilities in the multisite component in CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 renderstatusicons function in htmllib.py or 2 ajaxaction functio...

CVE-2014-5338

CVE-2014-5338 affects Check_MK 1.2.4 (<1.2.4p4) and 1.2.5 (

CVE-2012-5338

CVE-2012-5338 affects JForum 2.1.9 and is an open redirect vulnerability exploitable via the returnPath parameter in the validateLogin action to jforum.page, enabling phishing by redirecting users to arbitrary sites. The connected Red Hat, Red Canary-like entries reiterate the same description. N...

Oracle Linux 5 : Critical: / firefox (ELSA-2007-0979)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0979 advisory. 1.5.0.12-0.7.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.7.el4 - Update to...

Scientific Linux Security Update : thunderbird on SL5.x, SL4.x, SL3.x i386/x86_64

Several flaws were found in the way in which Thunderbird processed certain malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by defau...

Mandriva Update for mozilla-firefox MDKSA-2007:202 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:202 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Ubuntu: Security Advisory (USN-535-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for seamonkey FEDORA-2007-2795

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for thunderbird FEDORA-2007-3414

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for seamonkey FEDORA-2007-2601

Check for the Version of seamonkey OpenVAS Vulnerability Test Fedora Update for seamonkey FEDORA-2007-2601 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for seamonkey FEDORA-2007-2601

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5338

CVE-2008-5338 is an XSS vulnerability in Bandwebsite (Bandsite portal system) 1.5, exploitable via info.php by passing a crafted section parameter to inject arbitrary script/HTML. The affected component is info.php; root cause is reflected XSS in the section parameter. Reported impact per sources...

Gentoo Security Advisory GLSA 200711-14 (firefox seamonkey xulrunner)

The remote host is missing updates announced in advisory GLSA 200711-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-14 (firefox seamonkey xulrunner)

The remote host is missing updates announced in advisory GLSA 200711-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1534-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1647

creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5338 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7594...