RHEL 6 : kernel (RHSA-2015:1221)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2015-2372

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

Microsoft Internet Explorer CVE-2015-2397 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-2421 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 6, 7, 8, 9, 10, and 11 are...

RHEL 6 : php (RHSA-2015:1218)

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Oracle Linux 6 : php (ELSA-2015-1218)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1218 advisory. - fix patch for CVE-2015-4024 - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accep...

wetteronline.de XSS vulnerability

Vulnerable URL: http://www.wetteronline.de/wettercams?gid=v6643=47.449=Zunzgen"-prompt/XSSposed/-"//=7.809 Details: Description| Value ---|--- Patched:| Yes, at 31.07.2015 Latest check for patch:| 31.07.2015 01:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

exelisvis.com XSS vulnerability

Vulnerable URL: http://www.exelisvis.com/docs/dosearch.php?query=BIP%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E=2=1=10=and= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

KLA10624 Privelege escalation vulnerability in VMware products

An unspecified vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a thread manipulations. Original advisories VMware advisory Related products VMware-Workstation VMware-Player...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146143 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Oracle Linux 6 : abrt (ELSA-2015-1210)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1210 advisory. abrt 2.0.8-26.0.1.el66.1 - Add abrt-oracle-enterprise.patch to be product neutral - Remove abrt-plugin-rhtsupport dependency for cli and desktop - Make...

Threat Outbreak Alert RuleID16431: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 39667 First Published: 2015 July 7 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16431 may contain the following files: Name | Size...

gucci.com XSS vulnerability

Vulnerable URL: http://www.gucci.com/au/search?query=%3Cimg+src%3Dx+onerror%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 04.05.2016 Latest check for patch:| 04.05.2016 08:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

RHEL 5 / 6 / 7 : firefox (RHSA-2015:1207)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1207 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws wer...

DLA-267-1 unattended-upgrades - security update

Bulletin has no description...

Views Bulk Operations - Moderately critical - Access Bypass - SA-CONTRIB-2015-131

The Views Bulk Operations module enables you to add bulk operations to administration views, executing actions on multiple selected rows. The module doesn't sufficiently guard user entities against unauthorized modification. If a user has access to a user account listing view with VBO enabled suc...

RHEL 6 : kernel (RHSA-2015:1199)

Updated kernel packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

[SECURITY] [DLA 260-1] hostapd security update

Package : hostapd Version : 1:0.6.10-2+squeeze2 CVE ID : CVE-2015-4142 A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to...

Oracle Linux 6 / 7 : postgresql (ELSA-2015-1194)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1194 advisory. 9.2.13-1 - update to 9.2.13 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-13.html 9.2.12-1 - update to 9.2.12 per release...

CentOS 6 / 7 : postgresql (CESA-2015:1194)

Updated postgresql packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...