Updated moodle package fixes security vulnerabilities

In Moodle before 2.8.7, phishing is possible when redirecting to external site using referer headers in error messages CVE-2015-3272. In Moodle before 2.8.7, several web services returning user information did not clean text in text custom profile fields, leading to possible XSS CVE-2015-3274. In...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3055)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3055 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502741 CVE-2015-0239 CVE-2015-0239 - x86/tls: Validate TLS entries to protect espfix...

phibetadelta.org XSS vulnerability

Vulnerable URL: http://www.phibetadelta.org/subpage.php?catid=3=%22%22;%3C/script%3E%3Cscript%3Eprompt%28/XSSPOSED/%29%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Oracle Linux 5 : bind97 (ELSA-2015-1515)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1515 advisory. - Fix CVE-2015-5477 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Updated python-django and python-django14 packages fix security vulnerabilities

Eric Peterson and Lin Hua Cheng discovered that a new empty record used to be created in the session storage every time a session was accessed and an unknown session key was provided in the request cookie. This could allow remote attackers to saturate the session store or cause other users' sessi...

Updated springframework package fixes security vulnerability

In Spring Framework before 3.2.14, if DTD is not entirely disabled, inline DTD declarations can be used to perform denial of service attacks known as XML bombs. Such declarations are both well-formed and valid according to XML schema rules but when parsed can cause out of memory errors. To protec...

Updated mariadb package fixes security vulnerabilities

The mariadb package has been updated to versions 5.5.44 and 10.0.20 in Mageia 4 and Mageia 5, respectively. Both fix an issue where the client is vulnerable to a man-in-the-middle attack when using the --ssl option, where the SSL/TLS protection could be disabled CVE-2015-3152. The Mageia 4 update...

kelkoo.fr XSS vulnerability

Vulnerable URL: http://www.kelkoo.fr/content/content.jsp?left=/content/nl/corporate/corporate-nav.jsp=/users/mailerform.jsp?refId=1=1%22=asd%22%3E=asd%22%3E=asd%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.02.2017 Latest check for...

takealot.com XSS vulnerability

Vulnerable URL: http://www.takealot.com/newsletters Details: Description| Value ---|--- Patched:| Yes, at 06.09.2015 Latest check for patch:| 06.09.2015 01:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3592 Google Pagerank| 5 VIP website status:| Yes Check...

RHEL 5 : java-1.7.0-ibm (RHSA-2015:1488) (Logjam)

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

alienware.nl XSS vulnerability

Vulnerable URL: http://www.alienware.nl/landings/alpha/!michalxss/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/t%28/XSS/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:36 GMT Vulnerability type:| XSS Vulnerability status:|...

richmondandtwickenhamtimes.co.uk XSS vulnerability

Vulnerable URL: http://www.richmondandtwickenhamtimes.co.uk/search/?search=%22+autofocus+onfocus%3D%22alert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at 01.09.2015 Latest check for patch:| 01.09.2015 01:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

purposegames.com XSS vulnerability

Vulnerable URL: http://www.purposegames.com/playlists?xss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88086 Google Pagerank| 5 VIP website status:| No Check purposegames.com SS...

CVE-2015-0130

Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....

sanofi.com.sg XSS vulnerability

Vulnerable URL: http://www.sanofi.com.sg/l/gb/en/search.jsp?Search=asd%22autofocus/onfocus=alert%28%27XSSPOSED%27%29%3E&submitSearch.x;=0&submitSearch.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 08.08.2015 Latest check for patch:| 08.08.2015 23:56 GMT Vulnerability type:| XSS...

IBM DB2 10.5 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 10.5 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists during the handling of SELECT statements with XML/XSLT function...

IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the monitoring or audit facility due to passwords being stored when handling specially crafted...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2015-1230)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1230 advisory. 1:1.7.0.85-2.6.1.3.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.85-2.6.1.3 - Check return value of gioinit in...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3050)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3050 advisory. kernel-uek 2.6.32-400.37.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444792 CVE-2015-2922 Tenable has extracted the preceding...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1235)

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...