RHEL 6 : rhev-hypervisor (RHSA-2016:0277)

Updated rhev-hypervisor packages that fix one security issue are now available. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

sierratradingpost.com Open Redirect vulnerability

Vulnerable URL: http://www.sierratradingpost.com/viewswitcher/switchview/?mobile=True=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 02.04.2016 Latest check for patch:| 02.04.2016 01:27 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclose...

Oracle: Security Advisory (ELSA-2016-3519)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2016-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wirtualnemedia.pl XSS vulnerability

Vulnerable URL: http://www.wirtualnemedia.pl/wyniki/query: Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17683 Google Pagerank| 6 VIP website status:| Yes Check wirtualnemedia.pl...

scrubtheweb.com XSS vulnerability

Vulnerable URL: http://www.scrubtheweb.com/cgi-bin/mail/absforms.cgi?Email==order=Name|Email|Comments=scrub=Membership+Question/Problemvariables== Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 16:17 GMT Vulnerability type:| XSS Vulnerability...

[SECURITY] [DLA 422-1] python-imaging security update

Package : python-imaging Version : 1.1.7-2+deb6u2 CVE ID : CVE-2016-0775 Debian Bug : 813909 Two buffer overflows were discovered in python-imaging, a Python library for loading and manipulating image files, which may lead to the execution of arbitrary code. CVE-2016-0775 Buffer overflow in...

DLA-422-1 python-imaging - security update

Bulletin has no description...

cplusplus.com XSS vulnerability

Vulnerable URL: http://www.cplusplus.com/info/delete.cgi?" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5505 Google Pagerank| 6 VIP website status:| Yes Check cplusplus.com SSL...

Debian DLA-420-1 : libmatroska security update

It was discovered that there was a invalid memory address issue in libmatroska, an extensible open standard audio/video container format. When reading a block group or a simple block that uses EBML lacing the frame sizes indicated in the lacing weren't checked against the available number of byte...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3519)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3519 advisory. - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection Andy Lutomirski Orabug: 22742507 CVE-2015-5157 - x86/nmi/64: Reorder nested NMI...

RHEL 6 / 7 : thunderbird (RHSA-2016:0258)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:0258 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-0258)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-0258 advisory. 38.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.6.0-1 - Update to 38.6.0 Tenable has...

mypoints.com XSS vulnerability

Vulnerable URL: https://www.mypoints.com/emp/u/signup.do Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 13:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4120 Google Pagerank| 6 VIP website status:| Yes...

daac.ornl.gov XSS vulnerability

Vulnerable URL: https://daac.ornl.gov/cgi-bin/daacdoi/doisearchproc.pl Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP website status:| No Check daac.ornl.gov SSL...

Oracle: Security Advisory (ELSA-2016-3516)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-419-1 : gtk+2.0 security update

Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 'Squeeze', this issue has been fixed in gtk+2.0 version 2.20.1-2+deb6u1. We recommend you to upgrade your gtk+2.0...

[SECURITY] [DLA 419-1] gtk+2.0 security update

Package : gtk+2.0 Version : 2.20.1-2+deb6u1 CVE ID : CVE-2013-7447 Debian Bug : 799275 Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 "Squeeze", this issue has been...

agri.huji.ac.il XSS vulnerability

Vulnerable URL: http://www.agri.huji.ac.il/local-bin/signup/index.cgi?mode=view=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

RHEL 6 : MRG (RHSA-2016:0224)

Updated kernel-rt packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which giv...