[SECURITY] [DLA 291-1] libidn security update

Package : libidn Version : 1.15-2+deb6u2 Adam Sampson found a vulnerability in GNU Libidn, library that implements the IETF IDN specifications. Libdin incorrectly handled invalid UTF-8 input, causing it to bad free. This issue was introduced by the fix for CVE-2015-2059. For Debian 6 “Squeeze”,...

Design/Logic Flaw

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...

CVE-2015-4478

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...

CVE-2015-4478

CVE-2015-4478 affects Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2. The issue arises when parsing JSON with JSON.parse and a reviver, which can redefine non-configurable properties on JavaScript objects and bypass the Same Origin Policy. Affected products: Firefox/ESR; root cause:...

Oracle Linux 6 : kernel (ELSA-2015-1623)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1623 advisory. - net udp: fix behavior of wrong checksums Denys Vlasenko 1240758 1240759 CVE-2015-5364 CVE-2015-5366 Tenable has extracted the preceding description...

savedwebhistory.org XSS vulnerability

Vulnerable URL: http://savedwebhistory.org/d/london.biz Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104635 Google Pagerank| 6 VIP website status:| No Check savedwebhistory.org S...

parenting247.org XSS vulnerability

Vulnerable URL: http://parenting247.org/search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6152833 Google Pagerank| 6 VIP website status:| No Check parenting247.org SSL...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1603)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Threat Outbreak Alert RuleID17299: Email Messages Distributing Malicious Software on October 6, 2015

Medium Alert ID: 40414 First Published: 2015 August 12 14:05 GMT Last Updated: 2015 October 7 12:47 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17299 an...

Important: Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 6

Red Hat Satellite 6.1 now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having an important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

CentOS Update for firefox CESA-2015:1586 centos6

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882242";...

RHEL 6 / 7 : firefox (RHSA-2015:1586)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1586 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were...

st.free.fr Open Redirect vulnerability

Vulnerable URL: http://st.free.fr/phpmyvisites.php?url=http%3A//www.xssposed.org/=42=FILE:OpenRedirect%20/XSSPOSED Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3981010...

[SECURITY] Fedora 22 Update: drupal6-cck-2.10-1.fc22

The Content Construction Kit allows you to add custom fields to custom content types using a web interface. In Drupal 5.x, custom content types can be created in Drupal core, and the Content Construction Kit allows you to add custom fields to any content type. In Drupal 7 and later, most of the...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3067)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3067 advisory. - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563042 CVE-2015-5697 Tenable has extracted the preceding description block...

Ubuntu 12.04 LTS : openjdk-6 vulnerabilities (USN-2706-1) (Bar Mitzvah) (Logjam)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732,...

emmanuelsmarketplace.com XSS vulnerability

Vulnerable URL: http://www.emmanuelsmarketplace.com/recipeweb/recipes.jsp Details: Description| Value ---|--- Patched:| Yes, at 14.08.2015 Latest check for patch:| 14.08.2015 09:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18118644 Google Pagerank| 3 VIP...

Threat Outbreak Alert RuleID17134: Email Messages Distributing Malicious Software on August 6, 2015

Medium Alert ID: 40326 First Published: 2015 August 5 20:20 GMT Last Updated: 2015 August 6 17:51 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17134 and...

Compass Rose - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-138

Compass Rose module provides a type of CCK field that allows to represent the most common orientations North, North-East, East, South-East, South, South-West, West and North-West. The module was embedding a JavaScript library from an external source that was not reliable, thereby exposing the sit...