unbreakable enterprise kernel security update

2.6.39-400.109.6 - block: do not pass disk names as format strings Kees Cook Orabug: 17230083 CVE-2013-2851 - libceph: Fix NULL pointer dereference in auth client code Tyler Hicks Orabug: 17230108 CVE-2013-1059 - ipv6: ip6skdstcheck must not assume ipv6 dst Eric Dumazet Orabug: 17371078...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Moderate: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes three security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS Update for kernel CESA-2013:1166 centos5

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:1166 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

MGASA-2013-0261 Updated xpdf packages fixes security vulnerability

PDF files could be used to inject shell code when xpdf was run from some terminal emulators, due to the use of escape sequences in error messages CVE-2012-2142...

CVE-2012-6588

SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2012-6589

CVE-2012-6589 Description: A cross-site scripting (XSS) vulnerability exists in MYRE Business Directory, specifically in search.php via the look parameter. Remote attackers could inject arbitrary web script or HTML. Affected component: MYRE Business Directory (search.php).Root cause: Unvalidated ...

CVE-2012-6585

CVE-2012-6585 : Cross-site scripting (XSS) in MYRE Realty Manager’s search.php allows remote attackers to inject arbitrary script via the cat_id1 parameter. Affected: MYRE Realty Manager, component: search.php, parameter: cat_id1. Exploitability: remote, no authentication; impact: partial integri...

CVE-2012-6589

Cross-site scripting XSS vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter...

CVE-2012-6584

CVE-2012-6584 concerns multiple SQL injection vulnerabilities in the MYRE Realty Manager application. The flaw allows remote attackers to execute arbitrary SQL commands through the bathrooms1 parameter in either demo2/search.php or search.php. The vulnerability is due to improper input handling i...

CVE-2012-6586

CVE-2012-6586 describes multiple SQL injection vulnerabilities in MYRE Vacation Rental Software that allow remote attackers to execute arbitrary SQL commands via parameters in vacation/1_mobile/search.php (garage1, bathrooms1) or through input to vacation/widgate/request_more_information.php. The...

CVE-2012-6588

The vulnerability CVE-2012-6588 affects the MYRE Business Directory product, specifically the links.php component. The issue is a SQL injection in the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not specify affected versions, build detail...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

CVE-2012-4733

CVE-2012-4733 affects Request Tracker (RT) 4.x prior to 4.0.13. The issue is an improper enforcement of the DeleteTicket and “custom lifecycle transition” permissions, allowing remote authenticated users who have the ModifyTicket permission to delete tickets via unspecified vectors. The connected...

CVE-2012-6583

Cross-site scripting XSS vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name...

CVE-2012-6583

The CVE-2012-6583 entry concerns the Drupal Imagemenu module (6.x-1.x) prior to 6.x-1.4. Affected component is the image file name rendering, which does not escape properly, enabling XSS when a user with the administer imagemenu permission accesses menus built from images. The vulnerability’s imp...

CVE-2012-6583

Cross-site scripting XSS vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name...

Fedora Update for glibc FEDORA-2013-15053

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.2 / 11.3 Security Update : tomcat6 (SAT Patch Numbers 8155 / 8156)

This update of tomcat6 fixes : - apache-tomcat-CVE-2012-3544.patch. bnc831119 - use chown --no-dereference to prevent symlink attacks on log bnc822177c7/prevents CVE-2013-1976 - Fix tomcat init scripts generating malformed classpath http://youtrack.jetbrains.com/issue/JT-18545 bnc804992 patch fro...