Lucene search
+L

85 matches found

OpenVAS
OpenVAS
added 2018/03/15 12:0 a.m.36 views

CentOS Update for mailman CESA-2018:0504 centos6

Check the version of mailman SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882858";...

6.1CVSS6.6AI score0.04569EPSS
Exploits3References2
Cent OS
Cent OS
added 2018/03/14 2:49 p.m.122 views

mailman security update

CentOS Errata and Security Advisory CESA-2018:0505 An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

6.1CVSS6.8AI score0.04569EPSS
Exploits3References7
Tenable Nessus
Tenable Nessus
added 2018/03/14 12:0 a.m.23 views

Scientific Linux Security Update : mailman on SL7.x x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108334; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

6.1CVSS7AI score0.04569EPSS
Exploits3References2
RedHat Linux
RedHat Linux
added 2018/03/13 5:21 p.m.72 views

Moderate: Red Hat Security Advisory: mailman security update

An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

6.1CVSS6.8AI score0.04569EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2018/03/08 12:0 a.m.27 views

SUSE SLED12 Security Update : yaml-cpp (SUSE-SU-2018:0631-1)

This update for yaml-cpp fixes the following issues : - CVE-2017-5950: Stack overflow in SingleDocParser::HandleNode function bsc1032144 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

5.5CVSS6.3AI score0.02034EPSS
Exploits1References4
OSV
OSV
added 2018/03/07 9:33 a.m.5 views

SUSE-SU-2018:0631-1 Security update for yaml-cpp

This update for yaml-cpp fixes the following issues: - CVE-2017-5950: Stack overflow in SingleDocParser::HandleNode function bsc1032144...

5.5CVSS5.6AI score0.02034EPSS
Exploits1References3
Debian
Debian
added 2018/02/09 10:29 a.m.30 views

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

6.1CVSS6.3AI score0.04569EPSS
Exploits3
Debian
Debian
added 2018/02/09 10:29 a.m.30 views

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

4.3CVSS1.8AI score0.04569EPSS
Exploits3
NVD
NVD
added 2018/01/23 4:29 p.m.17 views

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

6.1CVSS5.9AI score0.04569EPSS
Exploits3References9
Debian CVE
Debian CVE
added 2018/01/23 4:0 p.m.30 views

CVE-2018-5950

Removed by vendor...

6.1CVSS7.4AI score0.04569EPSS
Exploits3
CVE
CVE
added 2018/01/23 4:0 p.m.238 views

CVE-2018-5950

CVE-2018-5950 affects Mailman web UI: a cross-site scripting (XSS) vulnerability that can be triggered via a crafted user-options URL to inject arbitrary script/HTML. Affected: Mailman 2.1.x up to 2.1.25 (before 2.1.26). Impact per sources: remote attacker can execute script in user context; info...

6.1CVSS5.9AI score0.04569EPSS
Exploits3References9Affected Software1
UbuntuCve
UbuntuCve
added 2018/01/23 12:0 a.m.33 views

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

6.1CVSS7AI score0.04569EPSS
Exploits3References3
RedhatCVE
RedhatCVE
added 2017/04/06 11:48 a.m.27 views

CVE-2017-5950

The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

7.5CVSS5AI score0.02034EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2017/04/03 5:59 a.m.22 views

CVE-2017-5950

The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

5.5CVSS6.5AI score0.02034EPSS
Exploits1References1
OSV
OSV
added 2017/04/03 5:59 a.m.19 views

CVE-2017-5950

The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

5.5CVSS6.5AI score
Exploits0References3
CVE
CVE
added 2017/04/03 5:44 a.m.83 views

CVE-2017-5950

yaml-cpp (LibYaml-C++) vulnerability CVE-2017-5950 stems from SingleDocParser::HandleNode and affects 0.5.x series (e.g., 0.5.3). A crafted YAML file can cause stack consumption and application crash (DoS). Remediation per connected advisories: rebuild/upgrade to yaml-cpp 0.6.0 or newer (Fedora 2...

5.5CVSS5.3AI score0.02034EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/04/03 5:44 a.m.37 views

CVE-2017-5950

The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

5.3AI score0.02034EPSS
Exploits1References2
CVE
CVE
added 2017/02/01 8:0 p.m.53 views

CVE-2016-5950

CVE-2016-5950 affects IBM Kenexa LCMS Premier on Cloud. The vulnerability is that credentials are stored in plain text and could be read by an authenticated user, exposing sensitive information. The incident is documented with a CVSS3.0 base score of 6.5 (C:H/I:N/A:N) and CVSS2.0 base score 4.0 (...

6.5CVSS6.7AI score0.00988EPSS
Exploits0References2Affected Software1
Mageia
Mageia
added 2015/10/25 2:38 p.m.42 views

Updated nvidia driver packages fix security vulnerability

A vulnerability has been found in the nvidia proprietary driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges. A local user can issue a specially crafted IOCTL to write a 32-bit integer value stored in the kerne...

6.9CVSS6.2AI score0.00364EPSS
Exploits0References2
CVE
CVE
added 2015/09/29 12:0 a.m.72 views

CVE-2015-5950

CVE-2015-5950 affects NVIDIA display drivers across Windows and Linux (Windows: R352<353.82; R340<341.81; Linux: R304<304.128; R340<340.93; R352<352.41; GRID vGPU/vSGA: R352

6.9CVSS6.3AI score0.00364EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder