Oracle Linux 6 : glibc (ELSA-2018-1879)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1879 advisory. - CVE-2017-15670: glob: Fix one-byte overflow with GLOBTILDE 1504810 - CVE-2017-15804: glob: Fix buffer overflow in GLOBTILDE unescaping 1504810 Tenabl...

Oracle Linux 6 : kernel (ELSA-2018-1854)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1854 advisory. - powerpc 64s: Add support for a store forwarding barrier at kernel entry/exit Mauricio Oliveira 1581053 CVE-2018-3639 - x86 specctrl: Fix late microco...

Oracle Linux 6 : libvirt (ELSA-2018-1929)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1929 advisory. - cpu: define the 'ssbd' CPUID feature bit CVE-2018-3639 - cpu: define the 'virt-ssbd' CPUID feature bit CVE-2018-3639 - qemu: avoid denial of service...

Oracle Linux 6 : samba (ELSA-2018-1860)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1860 advisory. - resolves: 1553018 - Fix CVE-2018-1050 - resolves: 1509455 - Fix regression of CVE-2017-2619 - resolves: 1491211 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163 ...

RHEL 6 : java-1.7.1-ibm (RHSA-2018:1974)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1974 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...

Cisco AnyConnect Secure Mobility Client for Windows Desktop Input Validation Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows Desktop is a secure mobility client for the Windows platform from Cisco that provides secure access to networks and applications from any device. An input validation vulnerability exists in the vpnva-6.sys file and the vpnva64-6.sys file in Cisc...

Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2018-041)

According to the versions of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - The dogetmempolicy function in 'mm/mempolicy.c' in the Linux kernel allows local users to hit a...

Cross site scripting

mao10cms 6 allows XSS via the article page...

CVE-2018-12695

mao10cms 6 allows XSS via the m=bbs&a=index page...

Cross site scripting

mao10cms 6 allows XSS via the m=bbs&a=index page...

CVE-2018-12696

mao10cms 6 allows XSS via the article page...

CVE-2018-12695

mao10cms 6 allows XSS via the m=bbs&a=index page...

CVE-2018-12695

mao10cms 6 contains a cross-site scripting (XSS) vulnerability exploitable via the m=bbs&a=index page. The issue is documented across multiple sources (CNVD-2018-12044, NVD entry CVE-2018-12695) and is described as allowing injection of arbitrary web script or HTML. The concrete vulnerability det...

CentOS 6 : samba (CESA-2018:1860)

An update for samba is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CentOS 6 : libvirt (CESA-2018:1929)

An update for libvirt is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CentOS 6 : samba4 (CESA-2018:1883)

An update for samba4 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CentOS 6 : zsh (CESA-2018:1932)

An update for zsh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CentOS 6 : pcs (CESA-2018:1927)

An update for pcs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CentOS 6 : glibc (CESA-2018:1879)

An update for glibc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CentOS 6 : ding-libs / sssd (CESA-2018:1877)

An update for sssd and ding-libs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...