ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2016-8628 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2016-8628 Source advisory: MEND:CVE-2016-8628...

openSUSE Security Update : ansible (openSUSE-2017-1259)

This update for ansible to version 2.4.1.0 fixes the following vulnerabilities : - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment bsc1038785 - CVE-2016-9587: host to controller command execution vulnerability bsc1019021 - CVE-2016-8628: Command injection by...

CVE-2017-8628

creationtimestamp| type| source ---|---|--- 2017-09-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=224 2023-12-18 03:40:48+00:00| seen| https://t.me/arpsyndicate/1903 2026-07-26 07:01:59+00:00| seen| https://t.me/KaitNews/5803 2026-07-26 07:02:02+00:00| seen|...

CVE-2017-8628

CVE-2017-8628 concerns a spoofing vulnerability in Microsoft’s Bluetooth driver stack for Windows platforms. The flaw allows an attacker within physical proximity and with Bluetooth enabled to initiate a Bluetooth connection and perform a man-in-the-middle attack, potentially forcing traffic thro...

Microsoft Bluetooth Driver Spoofing Vulnerability (KB4034786)

This host is missing an important security update according to Microsoft KB4034786 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Patches .NET Zero Day Vulnerability in September Update

An actively exploited zero-day vulnerability tied to Microsoft’s .NET framework is one of 25 critical and 54 important vulnerabilities fixed by Microsoft in its September Patch Tuesday security bulletin. According to Microsoft, the .NET framework vulnerability CVE-2017-8759 allows attackers to...

Microsoft Windows Bluetooth Driver CVE-2017-8628 Man in the Middle Spoofing Vulnerability

Description Microsoft Windows is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Windows 10...

Multiple Bluetooth implementation vulnerabilities affect many devices

Overview A collection of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively affect Windows, iOS, and Linux-kernel-based operating systems including Android and Tizen, and may in worst case allow an unauthenticated attacker to perfor...

Windows 8.1 and Windows Server 2012 R2 September 2017 Security Updates

The remote Windows host is missing security update 4038793 or cumulative update 4038792. It is, therefore, affected by multiple vulnerabilities : - A race condition that could lead to a remote code execution vulnerability exists in NetBT Session Services when NetBT fails to maintain certain...

MediaWiki Multiple Vulnerabilities (Dec 2015) - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

CVE-2015-8628

CVE-2015-8628 affects MediaWiki pages Special:MyPage, Special:MyTalk, Special:MyContributions, Special:MyUploads, and Special:AllMyUploads. Vulnerability allows remote attackers to obtain sensitive user login information via crafted links combined with page view statistics in MediaWiki releases p...

CVE-2016-8628

Ansible fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as...

Fedora Update for ansible FEDORA-2016-3ccb098630

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ansible FEDORA-2016-3113e71193

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : ansible (2016-3ccb098630)

Add patch to fix dnf module groupinstall handling ---- Update to new ansible 2.2 version. For full changes see : https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 24 : ansible (2016-3113e71193)

Add patch to fix dnf module groupinstall handling ---- Update to new ansible 2.2 version. For full changes see : https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Mageia: Security Advisory (MGASA-2015-0486)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8628

CVE-2014-8628 affects PolarSSL: memory leak in parsing X.509 certificates can be exploited remotely to cause DoS via a large number of crafted certificates. Affected versions are PolarSSL before 1.2.12 and 1.3.x before 1.3.9; CVE-2014-9744 covers a separate ClientHello issue. Remediation is to up...

MGASA-2015-0185 Updated polarssl & hiawatha packages fix security vulnerabilities

Updated hiawatha package fixes security vulnerabilities: The hiawatha package included a bundled copy of PolarSSL 1.3.2, which was vulnerable to several security issues that had already been fixed in the system polarssl package. These issues were CVE-2014-4911, CVE-2014-8627, CVE-2014-8628, and...

Updated polarssl & hiawatha packages fix security vulnerabilities

Updated hiawatha package fixes security vulnerabilities: The hiawatha package included a bundled copy of PolarSSL 1.3.2, which was vulnerable to several security issues that had already been fixed in the system polarssl package. These issues were CVE-2014-4911, CVE-2014-8627, CVE-2014-8628, and...