[SECURITY] [DLA 431-1] libfcgi-perl security update

Package : libfcgi-perl Version : 0.71-1+squeeze1+deb6u1 CVE ID : CVE-2012-6687 Debian Bug : 815840 It was discovered that there was a remote denial of service in libfcgi-perl, a helper library for implementing the FastCGI web server protocol for Perl. For Debian 6 Squeeze, this issue has been fix...

[SECURITY] [DLA 430-1] libfcgi security update

Package : libfcgi Version : 2.4.0-8+deb6u1 CVE ID : CVE-2012-6687 Debian Bug : 681591 It was discovered that there was a remote denial of service in libfcgi, a library for implementing the FastCGI web server protocol. For Debian 6 Squeeze, this issue has been fixed in libfcgi version...

Directory traversal

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web...

Design/Logic Flaw

The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing /...

CVE-2016-0706

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended...

DLA-430-1 libfcgi - security update

Bulletin has no description...

DLA-431-1 libfcgi-perl - security update

Bulletin has no description...

[SECURITY] [DLA 429-1] pixman security update

Package : pixman Version : 0.16.4-1+deb6u2 CVE ID : CVE-2014-9766 It was discovered that there was a buffer overflow in pixman, a pixel-manipulation library for X and cairo. For Debian 6 Squeeze, this issue has been fixed in pixman version 0.16.4-1+deb6u2. Regards, - -- ,. : : : Chris Lamb...

CVE-2015-5174

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web...

FileField - Denial of Service - SA-CONTRIB-2016-008

FileField module allows users to upload files in conjunction with the Content Construction Kit CCK module in Drupal 6. The module doesn't validate that a request to delete a temporary file was made by the user who uploaded the file. An attacker can use this vulnerability to delete other user's fi...

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001

File upload access bypass and denial of service File module - Drupal 7 and 8 - Moderately Critical A vulnerability exists in the File module that allows a malicious user to view, delete or substitute a link to a file that the victim has uploaded to a form while the form has not yet been submitted...

DLA-428-1 websvn - security update

Bulletin has no description...

affiliate.webnode.com XSS vulnerability

Vulnerable URL: http://affiliate.webnode.com/scripts/banner.php?abid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 286632 Google...

RHEL 6 : chromium-browser (RHSA-2016:0286)

Updated chromium-browser packages that fix two security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 6 : rhev-hypervisor (RHSA-2016:0277)

Updated rhev-hypervisor packages that fix one security issue are now available. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

sierratradingpost.com Open Redirect vulnerability

Vulnerable URL: http://www.sierratradingpost.com/viewswitcher/switchview/?mobile=True=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 02.04.2016 Latest check for patch:| 02.04.2016 01:27 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclose...

Oracle: Security Advisory (ELSA-2016-3519)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2016-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wirtualnemedia.pl XSS vulnerability

Vulnerable URL: http://www.wirtualnemedia.pl/wyniki/query: Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17683 Google Pagerank| 6 VIP website status:| Yes Check wirtualnemedia.pl...

scrubtheweb.com XSS vulnerability

Vulnerable URL: http://www.scrubtheweb.com/cgi-bin/mail/absforms.cgi?Email==order=Name|Email|Comments=scrub=Membership+Question/Problemvariables== Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 16:17 GMT Vulnerability type:| XSS Vulnerability...