DLA-130-1 firebird2.1 - security update

Bulletin has no description...

Threat Outbreak Alert RuleID13028: Email Messages Distributing Malicious Software on January 6, 2015

Medium Alert ID: 36932 First Published: 2015 January 7 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13028 may contain the following files: Name |...

Threat Outbreak Alert RuleID13021: Email Messages Distributing Malicious Software on May 6, 2015

Medium Alert ID: 36919 First Published: 2015 January 7 14:31 GMT Last Updated: 2015 May 7 12:19 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13021 and...

SA-CONTRIB-2015-002 - Course - Cross Site Scripting (XSS)

Course module enables you to create e-learning courses with any number of requirements for completion. The module doesn't sufficiently filter node title displays when being used in a course. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to creat...

SA-CONTRIB-2015-010 - Log Watcher - Cross Site Request Forgery (CSRF)

Log Watcher allows you to monitor your site logs in a systematic way by setting up scheduled aggregations for specific log types. The report administration links are not properly protected from CSRF. A malicious user could cause a log administrator to enable, disable, or delete a Log Watcher repo...

SA-CONTRIB-2015-012 - Jammer - Cross Site Request Forgery (CSRF)

This module enables you to hide or remove items from displaying including the node and comment preview buttons, node delete button, revision log textarea, workflow form on the workflow tab, and feed icon. The report administration links are not properly protected from CSRF. A malicious user could...

SA-CONTRIB-2015-005 - WikiWiki - SQL injection

WikiWiki module gives you one place to create, share and find wiki pages in your site. The module did not sanitize user input inside a database query thereby leading to a SQL Injection vulnerability. CVE identifiers issued CVE-2015-3346 Versions affected WikiWiki 6.x-1.x versions prior to 6.x-1.2...

RHEL 7 : libvirt (RHSA-2015:0008)

Updated libvirt packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

DLA-129-1 polarssl - security update

Bulletin has no description...

DLA-127-1 pyyaml - security update

Bulletin has no description...

DLA-128-1 sox - security update

Bulletin has no description...

Oracle Linux 6 / 7 : docker (ELSA-2014-3110)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3110 advisory. 1.3.3-1.0.1 - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 -...

ESA-2014-173: RSA® Authentication Manager Unvalidated Redirect Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-173: RSA® Authentication Manager Unvalidated Redirect Vulnerability EMC Identifier: ESA-2014-173 CVE Identifier: CVE-2014-2516 Severity Rating: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N Affected Products: • RSA Authentication Manager...

DLA-126-1 ettercap - security update

Bulletin has no description...

DLA-124-1 unzip - security update

Bulletin has no description...

DLA-123-1 firebird2.5 - security update

Bulletin has no description...

RHEL 6 : kernel (RHSA-2014:2028)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:2028 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel handled GS segment...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3108)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3108 advisory. - net: guard tcpsetkeepalive to tcp sockets Eric Dumazet Orabug: 20224099 CVE-2012-6657 - isofs: Fix unbounded recursion when processing relocated...

DLA-122-1 eglibc - security update

Bulletin has no description...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory. - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224060 CVE-2014-5471 CVE-2014-5472 Tenable has extracted...