Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-61.1.6 - blk-mq: avoid setting hctx-tags-cpumask before allocation Akinobu Mita Orabug: 24464170 4.1.12-61.1.3 - ocfs2: improve recovery performance Junxiao Bi Orabug: 24395729 - qed: Utilize FW 8.10.3.0 Yuval Mintz Orabug: 24442553 - blk-mq: mark request queue as mq asap Ming L...

CVE-2016-6198

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service system crash via a rename system call, related to fs/namei.c and fs/open.c...

DEBIAN-CVE-2016-6198

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service system crash via a rename system call, related to fs/namei.c and fs/open.c...

CVE-2016-6198

CVE-2016-6198 affects the Linux kernel (pre-4.5.5) in its OverlayFS path. The bug occurs when a file under OverlayFS is renamed to a self-hardlink, causing post-rename operations to run and potentially crash the kernel. Local users can trigger a denial of service (system crash) via a rename sysca...

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

OracleVM 3.4 : kernel-uek (OVMSA-2016-0091)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 -...

kernel-uek security update

kernel-uek 4.1.12-37.6.1 - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - ovl: verify upper dentry before unlink and rename Miklos Szeredi Orabu...

CVE-2014-6198

IBM Security Network Protection is affected by CVE-2014-6198, a Cross‑Site Request Forgery (CSRF) flaw in 5.3 before 5.3.1 that could allow a remote attacker to hijack an authenticated user’s session by luring them to a malicious page. The issue arises from improper validation of user‑supplied in...

HP Service Manager WebTier and Windows Client未明跨站脚本漏洞

CVE ID:CVE-2013-6198 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ---...

CVE-2013-6198

HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...

Successful Shell Attack Detected - Windows 'net user' Command

Binary data 6198.prm...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-6198

CVE-2008-6198 affects the Custom Pages 1.0 plugin for MyBulletinBoard (MyBB). The vulnerability is an SQL injection in pages.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (NVD entry; CVE listing; PRION and CVELIST re...

CVE-2008-6198

creationtimestamp| type| source ---|---|--- 2008-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5379...

CVE-2007-6198

The CVE-2007-6198 issue affects the Plumtree Portal component (portal/server.pt) in BEA AquaLogic Interaction versions 5.0.2–5.0.4 and 6.0.1.218452. The vulnerability allows wildcards in advanced searches for usernames via the in_tx_fulltext parameter, enabling remote attackers to enumerate valid...