CentOS: Security Advisory for python3 (CESA-2020:5010)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 6 : kernel (ELSA-2020-5934)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5934 advisory. - arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set,...

RHEL 6 : tomcat6 (RHSA-2020:0912)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0912 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat AJP File...

Oracle Linux 6 : net-snmp (ELSA-2020-5129)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5129 advisory. 1:5.5-60.0.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-60.el6.2 - fix CVE-2020-15862 1875960 Tenable has extracted the preceding descripti...

Oracle Linux 6 : microcode_ctl (ELSA-2020-5084)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5084 advisory. - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698 1893243, 1893238: -...

RHEL 6 : net-snmp (RHSA-2020:5129)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5129 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

HorizontCMS File Upload Vulnerability

HorizontCMS is an open source, responsive content management system CMS built on Laravel 6, VueJs 2.6 and Bootstrap 3.4. HorizontCMS 1.0.0-beta is vulnerable to unrestricted file uploads. An attacker can exploit this vulnerability to upload PHP code via zip file and execute PHP files via HTTP GET...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2020-5936)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5936 advisory. - USB: serial: omninet: fix reference leaks at open Johan Hovold Orabug: 30484765 CVE-2017-8925 - x8632, entry: Store badsys error code in %eax Sve...

Oracle Linux 6 : firefox (ELSA-2020-3835)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3835 advisory. 78.3.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 78.3.0 - Update to 78.3.0 build1 78.2.0...

Oracle Linux 6 : thunderbird (ELSA-2020-4947)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4947 advisory. 78.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.4.0-1 - Update to 78.4.0 build1 - Disabled...

Security Bulletin: Vulnerability in Java SE libraries could allow unauthenticated attacker to cause denial of service

Summary An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors. Vulnerability Details Refer to the security bulletins listed in the...

Ubuntu: Security Advisory (USN-4171-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : xorg-x11-server on SL6.x i686/x86_64 (2020:4953)

The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:4953-1 advisory. - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 - xorg-x11-server: Integer underflow in the X input extension...

Oracle Linux 8 : varnish:6 (ELSA-2020-4756)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4756 advisory. - Resolves: 1790907 - CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure - Resolves: 1763958 -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5926)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5926 advisory. - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32137965 CVE-2020-8694 CVE-2020-8695 - netfilter: nfnetlink: correctly...

Hotfix WSS11E001 - For XenServer 6.x with WebSelfService

BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...

Intel® Wireless Bluetooth® Advisory

Summary: Potential security vulnerabilities in some Intel® Wireless Bluetooth® products may allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12321 Description:...

CentOS: Security Advisory for libX11 (CESA-2020:4946)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for firefox (CESA-2020:4330)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 6 : libX11 (RHSA-2020:4946)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4946 advisory. - An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled...