Debian DLA-418-1 : wordpress security update

WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar. CVE-2016-2221 Wordpress could be vulnerable for an open...

[SECURITY] [DLA 418-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u9 CVE ID : CVE-2016-2221 CVE-2016-2222 Debian Bug : 813697 WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open...

[SECURITY] [DLA 416-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u11 CVE ID : CVE-2015-7547 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2015-7547 The Google Security Team and Red Hat discovered that the glibc host name resolver function, getaddrinfo, when processing AFUNSPEC queries f...

[SECURITY] [DLA 417-1] xdelta3 security update

Package : xdelta3 Version : 0y.dfsg-1+deb6u1 CVE ID : CVE-2014-9765 Debian Bug : 814067 It was discovered that there was a buffer overflow in in xdelta3, a diff utility which works with binary files. This vulnerability allowed arbitrary code execution from input files. For Debian 6 Squeeze, this...

DLA-416-1 eglibc - security update

Bulletin has no description...

DLA-418-1 wordpress - security update

Bulletin has no description...

DLA-417-1 xdelta3 - security update

Bulletin has no description...

[SECURITY] [DLA 415-1] cpio security update

Package : cpio Version : 2.11-4+deb6u2 CVE ID : CVE-2016-2037 Debian Bug : 812401 An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 "Squeeze", this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about th...

DLA-415-1 cpio - security update

Bulletin has no description...

htop 2.0 - An Interactive Process Viewer for Unix

htop is an interactive system-monitor process-viewer. It is designed as an alternative to the Unix program top. It shows a frequently updated list of the processes running on a computer, normally ordered by the amount of CPU usage. Unlike top, htop provides a full list of processes running, inste...

Panasonic FPWIN Pro Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from Trend Micro’s Zero Day Initiative ZDI concerning buffer overflow vulnerabilities in Panasonic FPWIN Pro software. These vulnerabilities were reported to ZDI by security researcher Steven Seeley. Panasonic has produced a new version to mitigate these...

RHEL 5 / 6 : flash-plugin (RHSA-2016:0166)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt59

3:11-alt59 built Feb. 11, 2016 Sergey V Turchin in task 158593 Feb. 10, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,...

Oracle: Security Advisory (ELSA-2016-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : sos (CESA-2016:0152)

An updated sos package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Embedded Media Field - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2016-004

This module enables you to to display video, image, and audio files from various third party providers The module doesn't sufficiently sanitize path arguments under certain scenarios. This vulnerability is mitigated by the fact that an attacker must be able to trick an administrator into visiting...

Oracle Linux 6 : sos (ELSA-2016-0152)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-0152 advisory. 3.2-28.0.1.2 - Add vendor, vendor URL info for Oracle Linux orabug 17656507 [email protected] - Direct traceroute to linux.oracle.com John Haxby orabug 1171327...

RHEL 6 / 7 : pcs (RHSA-2015:1700)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1700 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. A command injection flaw was foun...

peapod.com Open Redirect vulnerability

Vulnerable URL:...

newlook.com XSS vulnerability

Vulnerable URL: http://www.newlook.com/fr/furniture/helpcentrefaq.jsp?pageName=404%22;alert/XSSPOSED/;// Details: Description| Value ---|--- Patched:| Yes, at 20.06.2016 Latest check for patch:| 20.06.2016 11:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34...