CVE-2016-5642

CVE-2016-5642 affects Opmantek NMIS prior to 8.5.12G, with a cross-site scripting (XSS) flaw exploitable via SNMP. A remote attacker with SNMP access can inject arbitrary web script or HTML into NMIS web sessions, potentially impacting user-facing interfaces. Public sources in connected documents...

CVE-2017-5642

CVE-2017-5642 affects Apache Ambari Server during installation of versions 2.4.0–2.4.2, where Ambari Server artifacts are not created with proper ACLs. This is a design/ACL misconfiguration issue that can impact confidentiality, integrity, and availability of artifacts (per the NVD entry: CVSS ba...

Opmantek NMIS Multiple Vulnerabilities

Opmantek NMIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opmantek:nmis"; if descriptio...

CVE-2015-5642

ICZ MATCHA INVOICE is affected by multiple SQL injection vulnerabilities (CWE-89) in versions 2.5.6 and earlier, allowing a remote authenticated attacker to obtain or alter information in the database. The issues pertain to the web-based billing management software and are associated with unspeci...

Gentoo Security Advisory GLSA 201401-15

Gentoo Linux Local Security Checks GLSA 201401-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : fail2ban (openSUSE-SU-2013:0566-1)

This update of fail2ban fixes a startup related startup-problem and a security problem fixed upstream CVE-2012-5642. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-267. The text...

Digium Asterisk SIP Invalid SDP Media Descriptions Denial of Service (CVE-2013-5642)

A denial of service vulnerability exists in Asterisk Open Source, Certified Asterisk and Asterisk with Digiumphones...

Fedora Update for asterisk FEDORA-2013-15567

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Asterisk SIP Channel Driver Invalid SDP Denial of Service (AST-2013-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability. The application does not properly handle an invalid SDP in a SIP request if such a request defines media descriptions and then defines...

Mandriva Linux Security Advisory : asterisk (MDVSA-2013:223)

Updated asterisk packages fix security vulnerabilities : A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A...

MGASA-2013-0266 Updated asterisk package fixes security vulnerabilities

A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A remotely exploitable crash vulnerability exists in the S...

Fedora Update for fail2ban FEDORA-2013-10806

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fail2ban FEDORA-2013-10830

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fail2ban FEDORA-2013-10806

Check for the Version of fail2ban OpenVAS Vulnerability Test Fedora Update for fail2ban FEDORA-2013-10806 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : fail2ban (MDVSA-2013:078)

Updated fail2ban package fixes security vulnerability : fail2ban before 0.8.8 didn't escape the content of \ if used in custom action files, which could cause issues on the system running fail2ban as it scans log files, depending on what content is matched, since that content could contain...

Fedora 18 : fail2ban-0.8.8-1.fc18 (2012-20589)

Update to 0.8.8 CVE-2012-5642 Bug 887914 - Fixes : - Alan Jenkins - 8c38907 Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid banning due to misconfigured DNS. Close gh-64 - Yaroslav Halchenko - 83109bc IMPORTANT: escape the content of if used in custom action files since its value...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

CVE-2012-5642

Fail2ban CVE-2012-5642 affects versions before 0.8.8. The vulnerability arises from improper handling of the content of the tag, which could allow remote attackers to trigger unsafe behavior in a custom action file via arbitrary symbols in that content. Impact is described as potential unsafe be...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

Fedora Update for fail2ban FEDORA-2012-20619

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...