CentOS 6 : qemu-kvm (CESA-2015:1087)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

scsu.edu XSS vulnerability

Vulnerable URL: http://www.scsu.edu/searchresults.cfm Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 532618 Google Pagerank| 6 VIP website status:| No Che...

RHEL 6 : kernel (RHSA-2015:1082)

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt45

3:11-alt45 built June 10, 2015 Sergey V Turchin in task 145264 June 10, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3096, CVE-2015-3097, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106,...

RHEL 6 : kernel (RHSA-2015:1081)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1081 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's implementation of...

Oracle Linux 6 : kernel (ELSA-2015-1081)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1081 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202860 1185166 CVE-2015-1805 - x86 crypto: aesni - fix memory usage in...

CVE-2015-0770

The vulnerability CVE-2015-0770 affects Cisco TelePresence TC software on the SX20 Integrator C platform, specifically TC 6.x before 6.3.4 and 7.x before 7.3.3. The root cause is improper handling of HTTP requests leading toCRLF injection and HTTP response splitting, allowing an unauthenticated, ...

CVE-2015-0770

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341...

etymonline.com XSS vulnerability

Vulnerable URL: http://www.etymonline.com/abbr.php?allowedinframe=%27%22--%3E%3C/style%3E%3C/scRipt%20%3E%3CscRipt%3Ealert%28%27XSSPOSED%27%29%3C/scRipt%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:03 GMT Vulnerability type:| XSS...

1 Click Extract Audio 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the...

1 Click Audio Converter 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the...

pipe inatomic

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used b...

1 Click Extract Audio 2.3.6 Buffer Overflow

1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

RHEL 6 / 7 : openssl (RHSA-2015:1072) (Logjam)

Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Oracle Linux 6 / 7 : openssl (ELSA-2015-1072)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1072 advisory. 1.0.1e-30.9 - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits limit will be increased in future...

Low: Red Hat Enhancement Advisory: Red Hat JBoss Enterprise Application Platform 6.4.1 update on RHEL 6

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.1 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application...

RHEL 6 : virtio-win (RHSA-2015:1043)

An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module exploits a file upload vulnerability in SysAid Help Desk v14.3 and v14.4. The vulnerability exists in the RdsLogsEntry servlet which accepts unauthenticated file uploads and handles zip file contents in an insecure way. By combining both weaknesses, a remote attacker can accomplish...