Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147609 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

CVE-2014-5563

The CVE concerns the Android application Show do Milhao 2014 (package br.com.lgrmobile.sdm), version 1.4.6. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...

Cisco Mars Cross-Site Scripting Vulnerability - CVE-2013-5563

Vulnerability Type: Cross-Site Scripting CVE: CVE-2013-5563 Products and affected versions: Cisco Security Monitoring, Analysis and Response System CS-MARS - All versions Vendor Website: http://www.cisco.com/en/US/products/ps6241/ Cisco Advisory: https://tools.cisco.com/bugsearch/bug/CSCul16173...

a10-octavia (>=1.0.0 <=1.3.3) potentially affected by CVE-2012-5563 via keystone (=15.0.1)

keystone PYPI version =15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keystone and may be impacted: - a10-octavia =1.0.0, =1.3.3 Source cves: CVE-2012-5563 Source advisory: OSV:PYSEC-2012-20...

a10-octavia (>=2.0.0 <=2.2.0) potentially affected by CVE-2012-5563 via keystone (=18.0.0)

keystone PYPI version =18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on keystone and may be impacted: - a10-octavia =2.0.0, =2.2.0 Source cves: CVE-2012-5563 Source advisory: OSV:PYSEC-2012-20...

CVE-2012-5563

CVE-2012-5563 affects OpenStack Keystone as used in OpenStack Folsom 2012.2. Keystone does not properly enforce token expiration, allowing remote authenticated users to bypass authorization by creating new tokens via token chaining. This issue is noted as a regression of CVE-2012-3426. Red Hat RH...

Moderate: Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Updated openstack-keystone packages that fix two security issues, multiple bugs, and add enhancements are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Ubuntu: Security Advisory (USN-1641-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 : keystone vulnerabilities (USN-1641-1)

Vijaya Erukala discovered that Keystone did not properly invalidate EC2-style credentials such that if credentials were removed from a tenant, an authenticated and authorized user using those credentials may still be allowed access beyond the account owner's expectations. CVE-2012-5571 It was...

USN-1641-1: OpenStack Keystone vulnerabilities

Vijaya Erukala discovered that Keystone did not properly invalidate EC2-style credentials such that if credentials were removed from a tenant, an authenticated and authorized user using those credentials may still be allowed access beyond the account owner's expectations. CVE-2012-5571 It was...

CVE-2012-5563

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression...

OpenSSL Version Detection

Binary data 5563.prm...

CVE-2008-5563

CVE-2008-5563 affects Aruba Mobility Controller versions 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x. The vulnerability allows remote attackers to cause a denial of service (device crash) by sending a malformed EAP frame. The sources consistently describe a network-exposed DoS vector ...

CVE-2007-5563

CVE-2007-5563 affects VirtueMart versions prior to 1.0.13. Multiple connected sources indicate a remote code execution vulnerability allowing attackers to run arbitrary PHP code via unspecified vectors. The documents do not provide concrete exploit steps, affected configurations, or remediation d...

CVE-2006-5563

CVE-2006-5563 affects Yahoo! Messenger (Service 18) before 8.1.0.195. Remote attackers can cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. This is the only technical detail provided by the sources; no further exploit steps, affect...