Low: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2016-5362

CVE-2016-5362 affects OpenStack Neutron’s IPTables firewall feature. The vulnerability exists in the DHCP-spoofing protection mechanism, allowing remote attackers to bypass anti-spoof controls and potentially cause a denial of service or intercept traffic via a crafted DHCP discovery. Affected re...

Juniper Junos bfdd RCE (JSA10690)

According to its self-reported version number, the remote Juniper Junos device is affected by a remote code execution vulnerability in the BFD daemon bfdd. A remote attacker, using a specially crafted BFD packet, can exploit this to cause a denial of service or execute arbitrary code. Note that...

CVE-2015-5362

The CVE-2015-5362 issue affects Juniper Junos OS where the BFD daemon (bfdd) can be reached remotely to trigger a crash/restart or arbitrary code execution via a crafted BFD packet. Affected versions span multiple releases across 12.1X44–15.1X49, including 12.1X44 before 12.1X44-D50, 12.1X46 befo...

Landesk Management Suite 9.5 RFI / CSRF

Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-5362

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...

CVE-2008-5362

CVE-2008-5362 covers a vulnerability in the DefineConstantPool action of the ActionScript 2 VM in Adobe Flash Player 10.x (before 10.0.12.36) and 9.x (before 9.0.151.0), and Adobe AIR before 1.5. The issue arises when an untrusted input value is accepted for a "constant count," enabling a remote ...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Windows)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Windows Authors: Chandan S Copyrigh...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Linux)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Linux Authors: Chandan S Copyright:...

SuSE 10 Security Update : Subversion (ZYPP Patch Number 5362)

This update of subversion fixes multiple vulnerabilities. - list CVS or SVN commits on 'all-forbidden' files. CVE-2008-1290 - directly access hidden CVSROOT folders. CVE-2008-1291 - expose restricted content via the revision view, the log history, or the diff view. CVE-2008-1292 %NASLMINLEVEL 703...

Immunity Canvas: JOOMLAMOSMEDIA_INCLUDE

Name| joomlamosmediainclude ---|--- CVE| CVE-2007-5362 Exploit Pack| CANVAS Description| Joomla mosMedia Component Remote File Inclusion Notes| CVE Name: CVE-2007-5362 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5362 CVE Url:...

CVE-2007-5362

The CVE-2007-5362 entry describes multiple PHP remote file inclusion (RFI) vulnerabilities in Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 for Mambo/Joomla!, allowing an attacker to execute arbitrary PHP code via mosConfig_absolute_path in includes/ (credits.html.php, info.html.php, m...

CVE-2006-5362

Technical details for CVE-2006-5362 are not provided in the supplied documents. No product/version specifics, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.