RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:2811)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2811 advisory. The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services AWS...

Important: Red Hat Security Advisory: eap7-jboss-ec2-eap security update

An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact o...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2016-7536

magick/profile.c in ImageMagick allows remote attackers to cause a denial of service segmentation fault via a crafted profile...

CVE-2016-7536

magick/profile.c in ImageMagick allows remote attackers to cause a denial of service segmentation fault via a crafted profile...

CVE-2016-7536

CVE-2016-7536 affects ImageMagick; the vulnerability is in magick/profile.c where a crafted profile can cause a remote denial of service (segmentation fault). The available documents confirm the impact as a DoS with segmentation fault and do not provide exploit details, affected versions, or reme...

openSUSE Security Update : ImageMagick (openSUSE-2016-1242)

This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...

UBUNTU-CVE-2016-7536

magick/profile.c in ImageMagick allows remote attackers to cause a denial of service segmentation fault via a crafted profile...

Fedora 22 : jenkins-1.609.3-5.fc22 (2015-938c70c840)

Security update, fixes: CVE-2015-7536 SECURITY-95, CVE-2015-7537 SECURITY-225, CVE-2015-7538 SECURITY-233, CVE-2015-7539 SECURITY-234 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2015-7536

Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...

CVE-2015-7536

Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...

CVE-2015-7536

CVE-2015-7536 is a cross-site scripting (XSS) vulnerability in Jenkins core prior to 1.640 and LTS prior to 1.625.2. Remote authenticated users could inject script via unspecified vectors related to workspaces and archived artifacts. Affected products: Jenkins (core/LTS). Root cause: insufficient...

CVE-2014-7536

CVE-2014-7536 affects the Android app Service Academy Forums (com.tapatalk.serviceacademyforumscom) 3.6.12. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2008-5735

creationtimestamp| type| source ---|---|--- 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7536 2008-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7547...