Scientific Linux Security Update : kernel on SL7.x x86_64 (20151119)

A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:2152 Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 7. This is the second...

RedHat Update for kernel RHSA-2015:2152-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2759-1)

It was discovered that an integer overflow error existed in the SCSI generic sg driver in the Linux kernel. A local attacker with write permission to a SCSI generic device could use this to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-5707 Marc-Andre...

USN-2759-1: Linux kernel vulnerabilities

It was discovered that an integer overflow error existed in the SCSI generic sg driver in the Linux kernel. A local attacker with write permission to a SCSI generic device could use this to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-5707 Marc-André...

CVE-2015-6526

The perfcallchainuser64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service infinite loop via a deep 64-bit userspace backtrace...

CVE-2015-6526

CVE-2015-6526 affects the Linux kernel on ppc64 where perf_callchain_user_64 can enter an infinite loop due to a deep 64-bit userspace backtrace. The evidence points to Linux kernel versions before 4.0.2 (fixed in 4.0.2) and local DoS via a crafted backtrace. Affected component: arch/powerpc/perf...

CVE-2014-6526

CVE-2014-6526 concerns Oracle Directory Server Enterprise Edition (ODSEE) Admin Console in Oracle Fusion Middleware 7.0. The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors related to the Admin Console. No concrete root cause, affected...

CVE-2012-6526

The CVE applies to Vastal I-Tech Freelance Zone, specifically the show_code.php component. The root cause is a SQL injection in the code_id parameter that allows remote attackers to execute arbitrary SQL commands. In the provided sources, vulnerability details indicate that an attacker can exploi...

CVE-2012-6526

creationtimestamp| type| source ---|---|--- 2012-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36574...

CVE-2008-6526

SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-1838...

CVE-2008-6526

CVE-2008-6526 concerns a SQL injection in BosDev BosClassifieds Classified Ads System 3.0. The vulnerability exists in index.php where the cat_id parameter is unsafely used in SQL queries, allowing remote attackers to execute arbitrary SQL commands. This mirrors the related CVE-2008-1838 vector, ...

CVE-2008-6526

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6962...

CVE-2007-6526

Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...

CVE-2007-6526

Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...

CVE-2007-6526

CVE-2007-6526 is an XSS vulnerability in TikiWiki before 1.9.9, caused by improper sanitization of the area_name parameter in tiki-special_chars.php. An attacker can inject arbitrary script/HTML via area_name, potentially affecting users’ sessions on the affected site. Public sources in the conne...

CVE-2006-6526

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2006-6526

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2006-6526

CVE-2006-6526 is a PHP remote file inclusion vulnerability affecting Gizzar (03162002 and earlier) where an attacker can cause arbitrary PHP code execution via the basePath parameter in index.php. The issue arises from unsafely including remote files, enabling code execution on affected servers. ...