Oracle Linux 6 : 389-ds-base (ELSA-2014-0292)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0292 advisory. 1.2.11.15-32 - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation rhel-6.5.z Ticket...

RHEL 6 : udisks (RHSA-2014:0293)

Updated udisks packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 5 / 6 : flash-plugin (RHSA-2014:0289)

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt27

3:11-alt27 built March 13, 2014 Sergey V Turchin in task 116326 --- March 13, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0503, CVE-2014-0504...

CentOS Update for gnutls CESA-2014:0246 centos6

Check for the Version of gnutls OpenVAS Vulnerability Test CentOS Update for gnutls CESA-2014:0246 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

SA-CONTRIB-2014-030 - SexyBookmarks - Information Disclosure

The SexyBookmarks module is a port of the WordPress SexyBookmarks plug-in. The module adds social bookmarking using the Shareaholic service. The module discloses the private files location when Drupal 6 is configured to use private files. This vulnerability is mitigated by the fact that only site...

CentOS Update for mod_dav_svn CESA-2014:0255 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for mod_dav_svn CESA-2014:0255 centos6

Check for the Version of moddavsvn OpenVAS Vulnerability Test CentOS Update for moddavsvn CESA-2014:0255 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Debian: Security Advisory (DSA-2876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2877-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2874-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal Mime Mail Module文件附件安全绕过漏洞

Bugtraq ID:65996 Drupal是一套开放源码的内容管理平台。 Drupal Mime Mail Module不正确校验附件文件路径，允许远程攻击者利用漏洞添加任意文件并获取敏感信息。 0 Drupal Mime Mail Module 6.x 厂商补丁： Drupal ----- Drupal Mime Mail Module 6.x-1.4已经修复该漏洞，建议用户下载更新： https://drupal.org/node/2211419...

Moderate: Red Hat Security Advisory: sudo security update

An updated sudo package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

QNX 6.x Photon Denial Of Service / File Overwrite

QNX 6.x Photon denial of service vulnerability by cenobyte 2013 - vulnerability description: QNX setuid root /usr/photon/bin/Photon allows users to create new servers with arbitrary filenames registered with the -N parameter. Photon does not check whether files exist and/or the owner of the ile i...

QNX 6.x phfont Enumeration

QNX 6.x phfont file and directory enumeration vulnerability by cenobyte 2014 - vulnerability description: QNX setuid root /usr/photon/bin/phfont allows any non-root user to enumerate files and directories as root due to PfAttachLocalDllArgv error messages. You can discover files and directories b...

Fedora 19 : v8-3.14.5.10-6.fc19 (2014-3253)

Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6650 to the following vulnerability : Name: CVE-2013-6650 URL: https://vulners.com/cve/CVE-2013-6650 The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before...

Debian: Security Advisory (DSA-2872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MODX Revolution 2.X SQL Injection

Product: MODX Revolution Severity: Extremely Critical Versions: 2.0.0–2.2.12 Vulnerability type: SQL Injection Report date: 2014-Mar-5 Fixed date: 2014-Mar-6 Description A vulnerability was discovered in MODX Revolution that allows users to inject and manipulate the database. Attackers could...

CentOS 6 : mariadb55-mariadb (CESA-2014:0189)

The remote CentOS host is missing a security update which has been documented in Red Hat advisory RHSA-2014:0189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Red Hat Security Advisory RHSA-2014:0189 and CentOS...

CentOS 6 : postgresql92-postgresql (CESA-2014:0221)

The remote CentOS host is missing a security update which has been documented in Red Hat advisory RHSA-2014:0221. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Red Hat Security Advisory RHSA-2014:0221 and CentOS...