DLA-99-1 flac - security update

Bulletin has no description...

DSA-3088-1 qemu-kvm - security update

Bulletin has no description...

RHEL 5 / 6 : thunderbird (RHSA-2014:1924)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1924 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

Oracle Linux 6 : thunderbird (ELSA-2014-1924)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1924 advisory. 31.3.0-1.0.1.el66 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 31.3.0-1 - Update to 31.3.0 Tenable has...

Fedora 20 : drupal6-6.34-1.fc20 (2014-15519)

https://www.drupal.org/SA-CORE-2014-006 - Update to Drupal 6. - Drupal 6.33 release notes can be found here, https://www.drupal.org/drupal-6.33-release-notes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Code injection

IBM Java Runtime Environment JRE 7 R1 before SR1 FP1 7.1.1.1, 7 before SR7 FP1 7.0.7.1, 6 R1 before SR8 FP1 6.1.8.1, 6 before SR16 FP1 6.0.16.1, and before 5.0 SR16 FP7 5.0.16.7 allows attackers to obtain the private key from a Certificate Management System CMS keystore via a brute force attack...

DLA-97-1 eglibc - security update

Bulletin has no description...

[SECURITY] [DLA 96-1] openjdk-6 security update

Package : openjdk-6 Version : 6b33-1.13.5-2deb6u1 CVE ID : CVE-2014-2490 CVE-2014-4209 CVE-2014-4216 CVE-2014-4218 CVE-2014-4219 CVE-2014-4244 CVE-2014-4252 CVE-2014-4262 CVE-2014-4263 CVE-2014-4266 CVE-2014-4268 CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506 CVE-2014-6511 CVE-2014-6512...

DLA-96-1 openjdk-6 - security update

Bulletin has no description...

RHEL 5 / 6 : flash-plugin (RHSA-2014:1915)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Debian DSA-3077-1 : openjdk-6 - security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Oracle Linux 6 : ruby (ELSA-2014-1911)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1911 advisory. - Fix REXML billion laughs attack via parameter entity expansion CVE-2014-8080. Resolves: rhbz1163993 Tenable has extracted the preceding description...

DLA-95-1 clamav - security update

Bulletin has no description...

[SECURITY] [DSA 3077-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3077-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3077-1 (openjdk-6 - security update)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, information disclosure or denial of service. OpenVAS Vulnerability Test $Id: deb3077.nasl 6759 2017-07-19 09:56:33Z teissa $ Auto-generated from...

DLA-94-1 php5 - security update

Bulletin has no description...

RHEL 6 : chromium-browser (RHSA-2014:1894)

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian: Security Advisory (DSA-3077-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-9015

Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions...

Cross site request forgery (csrf)

The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes aka phpass module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service CPU and memory consumption via a crafted request...