Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3093)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3093 advisory. 2.6.39-400.264.5 - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145599 CVE-2015-5156 Tenable has extracted the preceding description block directly...

Threat Outbreak Alert RuleID19191: Email Messages Distributing Malicious Software on November 6, 2015

Medium Alert ID: 41960 First Published: 2015 November 5 21:13 GMT Last Updated: 2015 November 6 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19191...

areah.com.br XSS vulnerability

Vulnerable URL: http://www.areah.com.br:80/?aspxerrorpath=/"'--; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44120 Google Pagerank| 6 VIP website status:| Yes Check areah.com.br...

CentOS Update for nss CESA-2015:1981 centos6

Check the version of nss SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882317";...

RHEL 6 / 7 : nss, nss-util, and nspr (RHSA-2015:1981)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1981 advisory. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

sunat.gob.pe XSS vulnerability

Vulnerable URL: http://www.sunat.gob.pe/cl-ti-itconsagen/BusqLibreAgencia.htm?opcion=consulta%22%20src=--%3E%3C/SCRIPT%3E%22%3E%27%3E%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:07 GMT...

Login Disable - Access Bypass - Moderately Critical - SA-CONTRIB-2015-162

This module enables you to prevent existing users from logging in to your Drupal site unless they know the secret key to add to the end of the ?q=user login form page. The Login Disable module doesn't support other contributed user authentication modules like CAS or URL Login. When combined with...

icould.com XSS vulnerability

Vulnerable URL: http://icould.com/search-wizard/?term=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 17:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Debian DLA-337-1 : busybox security update

busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been fixed in busybox version 1.17.1-8+deb6u11. NOTE: Tenable Network...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

[SECURITY] [DLA 337-1] busybox security update

Package : busybox Version : 1:1.17.1-8+deb6u11 Debian Bug : 803097 busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been...

DLA-338-1 xscreensaver - security update

Bulletin has no description...

oso.chalmers.se XSS vulnerability

Vulnerable URL: http://www.oso.chalmers.se/library/books.php/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31750 Google Pagerank| 6 VIP website status:| Yes Check oso.chalmers.s...

bosch.com.cn XSS vulnerability

Vulnerable URL: http://www.bosch.com.cn/zh/cn/newsroom4/news4/news-overview-page.php?fullTextSearch="=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 FC6 and possibly other platforms, allow user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-3280

The Database Link library dblink in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system...

CVE-2006-6057

The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems, allows local users to cause a denial of service crash via a malformed gfs2 file stream that triggers a NULL pointer dereference in the initjournal function...

careerjet.com.tr XSS vulnerability

Vulnerable URL: http://www.careerjet.com.tr/search/jobs?s=%22%3E%3Csvg+onload%3Dalert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 131086 Google Pagerank| 6 VIP website status:| No Check...

careerjet.co.uk XSS vulnerability

Vulnerable URL: http://www.careerjet.co.uk/search/jobs?s=%22%3E%3Csvg+onload%3Dalert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113395 Google Pagerank| 6 VIP website status:| No Check...

boden.se XSS vulnerability

Vulnerable URL: http://www.boden.se/bodens-kommun/tillvaxtforvaltningenkulturenibodendans/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1775610 Google Pagerank| 6 VIP website...