DLA-342-1 openafs - security update

Bulletin has no description...

Unrestricted file upload

Unrestricted file upload vulnerability in mods/core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3098)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3098 advisory. - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145600 CVE-2015-5156 - RDS: fix race condition when sending a message on unbound socket...

creativity-online.com XSS vulnerability

Vulnerable URL: http://creativity-online.com/search?searchphrase=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=endeca Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

virginmobile.ca XSS vulnerability

Vulnerable URL: http://www.virginmobile.ca/fr/support/index.html?topic=myaccount'=FOT:56 Details: Description| Value ---|--- Patched:| Yes, at 02.06.2016 Latest check for patch:| 02.06.2016 11:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24074 Google...

RHEL 6 : flash-plugin (RHSA-2015:2023)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2023 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Oracle Linux 6 : sssd (ELSA-2015-2019)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2019 advisory. 1.12.4-47.4 - Resolves: rhbz1268783 - Memory leak / possible DoS with krb auth. 1.12.4-47.3 - Resolves: rhbz1268784 - SSSD POSIX attribute check is too strict...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt56

3:11-alt56 built Nov. 11, 2015 Sergey V Turchin in task 153026 Nov. 11, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661,...

CentOS 6 : sssd (CESA-2015:2019)

Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

UC Profile - Moderately Critical - Information Disclosure - SA-CONTRIB-2015-165

UC Profile module enables you to collect profile fields for users during the checkout process of Ubercart as a checkout pane. The module doesn't sufficiently check access to profiles under certain circumstances. Depending on the information being collected, sensitive data may be exposed. This...

CentOS Update for libipa_hbac CESA-2015:2019 centos6

Check the version of libipahbac SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882323";...

RHEL 6 : sssd (RHSA-2015:2019)

Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

etradeasia.com XSS vulnerability

Vulnerable URL: http://www.etradeasia.com/searchcompanies.asp?skey=retr0%22+autofocus+onfocus%3D%22alert%28%27xssposed%27%29&menu1;==0=0=companies Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Oracle: Security Advisory (ELSA-2015-1982)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3092)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3093)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3093 advisory. 2.6.39-400.264.5 - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145599 CVE-2015-5156 Tenable has extracted the preceding description block directly...

Threat Outbreak Alert RuleID19191: Email Messages Distributing Malicious Software on November 6, 2015

Medium Alert ID: 41960 First Published: 2015 November 5 21:13 GMT Last Updated: 2015 November 6 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19191...

areah.com.br XSS vulnerability

Vulnerable URL: http://www.areah.com.br:80/?aspxerrorpath=/"'--; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44120 Google Pagerank| 6 VIP website status:| Yes Check areah.com.br...