Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-0067)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0067 advisory. 1:1.7.0.75-2.5.4.0.0.1.el66 - Update DISTRONAME in specfile 1:1.7.0.75-2.5.4.0 - Fix abrtfriendlyhslogjdk7.patch to apply again. 1:1.7.0.75-2.5.4.0...

Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (POODLE)

The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components : - 2D - Deployment - Hotspot - Install - JAX-WS - JSSE - Libraries...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2015-0068) (POODLE)

From Red Hat Security Advisory 2015:0068 : Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2014-6587

CVE-2014-6587 is an unspecified vulnerability in Oracle Java SE affecting OpenJDK/OpenJDK-derived packages (notably 6u85, 7u72, 8u25) that could allow local users to impact confidentiality, integrity, and availability via unknown vectors related to Libraries. Several connected advisories confirm ...

java security update

CentOS Errata and Security Advisory CESA-2015:0069 Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

java security update

CentOS Errata and Security Advisory CESA-2015:0068 Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

CentOS 6 : java-1.8.0-openjdk (CESA-2015:0069) (POODLE)

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

CVE-2012-6587

creationtimestamp| type| source ---|---|--- 2012-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22712...

CVE-2007-6587

creationtimestamp| type| source ---|---|--- 2012-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37305...

Apache OFBiz <= 3.0.0 Multiple HTML Injection Vulnerabilities

Apache OFBiz is prone to multiple HTML injection vulnerabilities. Copyright C 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2008-6587

CVE-2008-6587 describes a cross-site request forgery (CSRF) in Vuze (formerly Azureus HTML WebUI) where requests to index.tmpl can hijack a user’s session to force downloads of arbitrary torrent files via the upurl parameter. Reported as likely in the 0.7.6 timeframe, this vulnerability could per...

CVE-2007-6587

Plogger 1.0 Beta 3.0 is affected by a SQL injection in plog-rss.php via the id parameter. The issue allows remote attackers to manipulate the database and potentially read/modify data. The vulnerability is confirmed across CVE-2007-6587 entries in NVD/NIST and corroborated by Nessus plugin covera...

CVE-2006-6587

Cross-site scripting XSS vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz allows remote attackers to inject arbitrary web script or HTML by posting a message...

CVE-2006-6587

CVE-2006-6587 is a Cross‑Site Scripting (XSS) flaw in the Apache OFBiz Open For Business (OFBiz) ecommerce forum component. The vulnerability allows remote attackers to inject arbitrary script or HTML by posting a message, targeting the forum implementation. The connected OpenVAS entry notes OFBi...

CVE-2006-6587

Cross-site scripting XSS vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz allows remote attackers to inject arbitrary web script or HTML by posting a message...