RHEL 5 / 6 / 7 : java-1.6.0-sun (RHSA-2015:1243) (Bar Mitzvah) (Logjam)

Updated java-1.6.0-sun packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 "SysAid Help Desk 'rdslogs' Arbitrary File Upload", 'Description' = %q This module exploits a file upload vulnerabilit...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt51

3:11-alt51 built July 18, 2015 Sergey V Turchin in task 146478 July 18, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5122, CVE-2015-5123...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3050)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3050 advisory. kernel-uek 2.6.32-400.37.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444792 CVE-2015-2922 Tenable has extracted the preceding...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1235)

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

oborot.ru XSS vulnerability

Vulnerable URL: http://oborot.ru/search2.php Details: Description| Value ---|--- Patched:| Yes, at 27.07.2015 Latest check for patch:| 27.07.2015 23:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27318 Google Pagerank| 6 VIP website status:| Yes Check...

CentOS 6 : kernel (CESA-2015:1221)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2015-1228)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1228 advisory. 1:1.8.0.51-1.b16 - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz1235162 1:1.8.0.51-0.b16 - July...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-1229)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1229 advisory. 1:1.7.0.85-2.6.1.2.0.1.el71 - Update DISTRONAME in specfile 1:1.7.0.85-2.6.1.2 - Bump upstream tarball to u25b01 to fix issue with 8075374 backport...

sjearthquakes.com XSS vulnerability

Vulnerable URL: http://www.sjearthquakes.com/video/2015/06/25/video-your-home%22%3Exss%3Cbody%20onpageshow=alert%28%27XSSPosed%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2015 Latest check for patch:| 19.08.2015 01:27 GMT Vulnerability type:| XSS Vulnerability status:|...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt50

3:11-alt50 built July 15, 2015 Sergey V Turchin in task 146354 July 14, 2015 Sergey V Turchin - fix changelog - security NOT fixed: CVE-2015-5122, CVE-2015-5123...

Oracle Linux 6 : kernel (ELSA-2015-1221)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1221 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202860 1185166 CVE-2015-1805 - net ipv4: Missing sknullsnodeinit in...

RHEL 6 : kernel (RHSA-2015:1221)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2015-2372

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

Microsoft Internet Explorer CVE-2015-2397 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-2421 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 6, 7, 8, 9, 10, and 11 are...

RHEL 6 : php (RHSA-2015:1218)

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Oracle Linux 6 : php (ELSA-2015-1218)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1218 advisory. - fix patch for CVE-2015-4024 - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accep...

wetteronline.de XSS vulnerability

Vulnerable URL: http://www.wetteronline.de/wettercams?gid=v6643=47.449=Zunzgen"-prompt/XSSposed/-"//=7.809 Details: Description| Value ---|--- Patched:| Yes, at 31.07.2015 Latest check for patch:| 31.07.2015 01:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

exelisvis.com XSS vulnerability

Vulnerable URL: http://www.exelisvis.com/docs/dosearch.php?query=BIP%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E=2=1=10=and= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...