CVE-2016-6151: Undefined Security Weakness

CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors...

CVE-2016-6152: Undefined Security Weakness

CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors...

PT-2016-6775

Name of the Vulnerable Software and Affected Versions CA eHealth versions 6.2.x through 6.3.x before 6.3.2.13 Description The issue allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands. Recommendations For CA eHealth versions 6.2.x through 6.3.x...

PT-2016-6774

Name of the Vulnerable Software and Affected Versions CA eHealth versions 6.2.x Description The issue allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands. Recommendations For CA eHealth versions 6.2.x, at the moment, there is no information about ...

Fedora 24 : ca-certificates (2016-7527145931)

This is an update to the Mozilla CA certificates list version 2.8, which has been published as part of Mozilla NSS 3.25. As in previous versions of the ca-certificates package, the CA list has been modified to keep several legacy CAs still trusted for compatibility reasons. Please refer to...

[SECURITY] Fedora 24 Update: ca-certificates-2016.2.8-1.0.fc24

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

Fedora 22 : ca-certificates (2015-679ec59860)

This is an update to the set of CA certificates version 2.5 as released with NSS version 3.19.3 However, as in previous versions of the ca-certificates package, the CA list has been modified to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for...

Fedora 23 : ca-certificates (2015-e52d4bd4c0)

This is an update to the set of CA certificates version 2.5 as released with NSS version 3.19.3 However, as in previous versions of the ca-certificates package, the CA list has been modified to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for...

Ubuntu 14.04 LTS / 16.04 LTS : NSS vulnerability (USN-3029-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3029-1 advisory. Tyson Smith and Jed Davis discovered that NSS incorrectly handled memory. A remote attacker could use this issue to cause NSS to crash, resulting in a...

USN-3029-1: NSS vulnerability

Tyson Smith and Jed Davis discovered that NSS incorrectly handled memory. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code. This update refreshes the NSS package to version 3.23 which includes the latest CA...

ca-lyon.justice.fr XSS vulnerability

Vulnerable URL: http://www.ca-lyon.justice.fr/extranet/index.php?option=comremository=376=select="=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2016-0398

CVE-2016-0398 affects IBM Cognos Analytics (CA) 11.0 and related IBM Cognos BI/Analytics offerings. The vulnerability allows content spoofing via a crafted URL and can mislead users into performing actions under false pretenses. Public descriptions consistently state CA 11.0 before 11.0.2 is vuln...

CVE-2015-8699

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Xxe

CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8698

CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in...

CVE-2015-8698

CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in...

CVE-2015-8699

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8698

CA Release Automation (formerly LISA Release Automation) is affected by an XML External Entity (XXE) issue. The vulnerability allows a remote attacker to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration with an entity reference. Affecte...

CVE-2015-8699

CVE-2015-8699 covers multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly CA LISA Release Automation). Affected are: 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026. The vulnerabilities allow remote attackers t...