RHEL 9 : nodejs and nodejs-nodemon (RHSA-2022:6595)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6595 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

CVE-2019-6595

Affected software: F5 BIG-IP Access Policy Manager (APM) Admin Web UI on 11.5.x–11.6.x. Vulnerability: Cross-site scripting (XSS) that can be exploited to inject script on the logon page. Root cause/impact: Remote attacker could render arbitrary script in the login interface, enabling XSS between...

F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K31424926)

Cross-site scripting XSS vulnerability in F5 BIG-IP Access Policy Manager APM 11.5.x and 11.6.x Admin Web UI. CVE-2019-6595 Impact A remote attacker may be able to access the BIG-IP APM logon page and inject arbitrary web script or HTML to launch a cross-site scripting XSS attack. C Tenable Netwo...

CVE-2013-6595

...

CVE-2013-6595

CVE-2013-6595 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-6595

CVE-2016-6595 affects the SwarmKit toolkit 1.12.0 for Docker, where remote authenticated users can cause a denial of service by issuing a long sequence of join and quit actions (prevention of cluster joins). The description is disputed by the vendor, which argues that the behavior is a resource p...

Oracle VirtualBox Multiple Vulnerabilities (Feb 2015) - Linux

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2014-6595

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589,...

CVE-2014-6595

CVE-2014-6595 is a local vulnerability in Oracle VM VirtualBox up to version 4.3.19 where the VMSVGA virtual graphics device could allow a local attacker to affect integrity and availability. The issue is identified as a separate vulnerability from CVE-2014-6588/6589/6590 and CVE-2015-0427. Affec...

Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.2 Multiple Command Injections

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.2. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an authenticated user to inject arbitrary shell commands via the CLI. CVE-2012-6595 /...

CVE-2012-6595

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...

CVE-2012-6595

CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...

CVE-2008-6595

SQL injection vulnerability in the pmkrssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6595

The vulnerability CVE-2008-6595 affects the pmk_rssnewsexport extension in TYPO3. The issue is a SQL injection that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The available documents confirm this as a SQL injection in the TYPO3 extension, but do not pr...

GLSA-200808-07 : ClamAV: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200808-07 ClamAV: Multiple Denials of Service Damian Put has discovered an out-of-bounds memory access while processing Petite files CVE-2008-2713, CVE-2008-3215. Also, please note that the 0.93 ClamAV branch fixes the first of th...

openSUSE 10 Security Update : clamav (clamav-5199)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837, CVE-2008-1836, CVE-2008-1835, CVE-2008-1833, CVE-2008-1387,...

Debian Security Advisory DSA 1497-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1497-1. OpenVAS Vulnerability Test $Id: deb14971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1497-1 clamav Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1497-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2006-6595

Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via "Manage Resources" and possibly other unspecified components...