Microsoft Internet Explorer Multiple Vulnerabilities (3008923)

This host is missing a critical security update according to Microsoft Bulletin MS14-080. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RHEL 5 / 6 : rpm (RHSA-2014:1974)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1974 advisory. The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying,...

Microsoft Exchange Server CVE-2014-6336 Tokens Validation URI Redirection Vulnerability

Description Microsoft Exchange Server is prone to a URI-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid ...

DLA-103-1 linux-2.6 - security update

Bulletin has no description...

DLA-102-1 tcpdump - security update

Bulletin has no description...

Fedora 21 : drupal6-6.34-1.fc21 (2014-15630)

https://www.drupal.org/SA-CORE-2014-006 - Update to Drupal 6. - Drupal 6.33 release notes can be found here, https://www.drupal.org/drupal-6.33-release-notes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Oracle Linux 6 / 7 : docker (ELSA-2014-3095)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3095 advisory. - Update source to 1.3.2 from https://github.com/docker/docker/releases/tag/v1.3.2 Prevent host privilege escalation from an image extraction...

DLA-101-1 jasper - security update

Bulletin has no description...

DLA-100-1 mutt - security update

Bulletin has no description...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3096)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3096 advisory. - net: sctp: fix panic on duplicate ASCONF chunks Daniel Borkmann Orabug: 19953088 CVE-2014-3687 - net: sctp: fix skboverpanic when receiving...

DLA-99-1 flac - security update

Bulletin has no description...

DSA-3088-1 qemu-kvm - security update

Bulletin has no description...

Oracle Linux 6 : thunderbird (ELSA-2014-1924)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1924 advisory. 31.3.0-1.0.1.el66 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.3.0-1 - Update to 31.3.0 Tenable has...

RHEL 5 / 6 : thunderbird (RHSA-2014:1924)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1924 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

Fedora 20 : drupal6-6.34-1.fc20 (2014-15519)

https://www.drupal.org/SA-CORE-2014-006 - Update to Drupal 6. - Drupal 6.33 release notes can be found here, https://www.drupal.org/drupal-6.33-release-notes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Code injection

IBM Java Runtime Environment JRE 7 R1 before SR1 FP1 7.1.1.1, 7 before SR7 FP1 7.0.7.1, 6 R1 before SR8 FP1 6.1.8.1, 6 before SR16 FP1 6.0.16.1, and before 5.0 SR16 FP7 5.0.16.7 allows attackers to obtain the private key from a Certificate Management System CMS keystore via a brute force attack...

DLA-97-1 eglibc - security update

Bulletin has no description...

[SECURITY] [DLA 96-1] openjdk-6 security update

Package : openjdk-6 Version : 6b33-1.13.5-2deb6u1 CVE ID : CVE-2014-2490 CVE-2014-4209 CVE-2014-4216 CVE-2014-4218 CVE-2014-4219 CVE-2014-4244 CVE-2014-4252 CVE-2014-4262 CVE-2014-4263 CVE-2014-4266 CVE-2014-4268 CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506 CVE-2014-6511 CVE-2014-6512...

DLA-96-1 openjdk-6 - security update

Bulletin has no description...

RHEL 5 / 6 : flash-plugin (RHSA-2014:1915)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...