13022 matches found
RHEL 6 : tomcat6 (RHSA-2015:0991)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0991 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the ChunkedInputFilter in...
CentOS 6 : pcs (CESA-2015:0990)
Updated pcs packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CentOS 6 : tomcat6 (CESA-2015:0991)
Updated tomcat6 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 6 : java-1.6.0-ibm (RHSA-2015:1006)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1006 advisory. IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several...
RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
Oracle Linux 6 : tomcat6 (ELSA-2015-0991)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0991 advisory. - Resolves: CVE-2014-0227 Limited DoS in chunked transfer encoding Tenable has extracted the preceding description block directly from the Oracle Linux security...
RHEL 6 : MRG (RHSA-2015:0989)
Updated kernel-rt packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
Updated kernel-rt packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
Ubuntu: Security Advisory (USN-2604-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3256-1 : libtasn1-6 - security update
Hanno Boeck discovered a heap-based buffer overflow flaw in the way Libtasn1, a library to manage ASN.1 structures, decoded certain DER-encoded input. A specially crafted DER-encoded input could cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code...
Debian Security Advisory DSA 3256-1 (libtasn1-6 - security update)
Hanno Boeck discovered a heap-based buffer overflow flaw in the way Libtasn1, a library to manage ASN.1 structures, decoded certain DER-encoded input. A specially crafted DER-encoded input could cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code...
Debian: Security Advisory (DSA-3256-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Low: Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update
Updated nss, nss-util, and nspr packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications...
linux/x86 - exit0 6 bytes
linux/x86 - exit0 6 bytes. Shellcode exploit for linx86 platform / linux/x86 exit0 - 6 bytes Febriyanto Nugroho / include char shellcode = "\xf7\xf0" "\xcd\x80" "\xeb\xfa"; int mainint argc, char argv asm"jmp %0;" : "=m" shellcode;...
Debian DLA-215-1 : libjson-ruby security update
The JSON gem for Ruby allowed remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL...
Debian DLA-213-1 : openjdk-6 security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. For Debian 6 'Squeeze', these problems have been fixed in version...
[SECURITY] [DLA 215-1] libjson-ruby security update
Package : libjson-ruby Version : 1.1.9-1+deb6u1 CVE ID : CVE-2013-0269 The JSON gem for Ruby allowed remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbo...
[SECURITY] [DLA 214-1] libxml-libxml-perl security update
Package : libxml-libxml-perl Version : 1.70.ds-1+deb6u1 CVE ID : CVE-2015-3451 Debian Bug : 783443 In some cases, XML::LibXML did not respect the request to disable entities expansion. Applications handling untrusted XML files can then be tricked into disclosing the content of local files. In...
[SECURITY] [DLA 213-1] openjdk-6 security update
Package : openjdk-6 Version : 6b35-1.13.7-1deb6u1 CVE ID : CVE-2015-0460 CVE-2015-0469 CVE-2015-0470 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of...