DLA-166-1 libarchive - security update

Bulletin has no description...

DLA-168-1 konversation - security update

Bulletin has no description...

DLA-167-1 redcloth - security update

Bulletin has no description...

Threat Outbreak Alert RuleID13864: Email Messages Distributing Malicious Software on March 6, 2015

Medium Alert ID: 37759 First Published: 2015 March 6 18:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13864 may contain the following files: Name | Siz...

RHEL 6 : 389-ds-base (RHSA-2015:0628)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0628 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

RHEL 6 : chromium-browser (RHSA-2015:0627)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0627 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

Oracle Linux 6 : 389-ds-base (ELSA-2015-0628)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0628 advisory. - Resolves: 1180629 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree Tenable has extracted the preceding description block directly from t...

Threat Outbreak Alert RuleID13847: Email Messages Distributing Malicious Software on March 6, 2015

Medium Alert ID: 37739 First Published: 2015 March 5 15:32 GMT Last Updated: 2015 March 6 16:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13847 and...

RHEL 6 : kernel (RHSA-2015:0285)

Updated kernel packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

SA-CONTRIB-2015-067 - Finder - Open Redirect

Finder module allows you to create flexible faceted search forms to find entities such as nodes or users based on the values of fields and database attributes. The provided function finderformgoto is susceptible to a phishing attack. An attacker could formulate a redirect in a way that gets the...

SA-CONTRIB-2015-065 - Registration codes - Multiple vulnerabilities

Registration codes module allows new account registrations only for users who provide a valid registration code. The module was not properly sanitizing user supplied text in some pages, thereby exposing XSS vulnerabilities. Additionally, some URLs were not protected against CSRF, a malicious user...

DLA-164-1 unace - security update

Bulletin has no description...

Apache Tomcat Version 6.x Detection

Binary data 8927.prm...

DLA-161-1 libgtk2-perl - security update

Bulletin has no description...

DLA-162-1 e2fsprogs - security update

Bulletin has no description...

CVE-2015-2087

Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0265)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0265 advisory. firefox 31.5.0-2.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 31.5.0-2 - Update to 31.5.0 ESR Build...

Samba file sharing services remote command execution vulnerability(CVE-2 0 1 5-0 2 4 0)-vulnerability warning-the black bar safety net

! t01b9c96682271c023e.jpg Is storm the CVE-2 0 1 5-0 2 4 0 security vulnerabilities occur in the smbd daemon, he can be a malicious samba client to use, an attacker by sending a carefully constructed packet to the samba server, authentication is not required, it is possible to cause the remote...

SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS)

SMS Framework module enables you to send and receive SMS messages from and into Drupal. The module doesn't sufficiently sanitize user supplied text in message previews, thereby exposing a reflected Cross Site Scripting vulnerability. An attacker could exploit this vulnerability by getting the...

RHEL 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:0263)

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...