Fedora Update for libxslt FEDORA-2013-4507

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2013-4507 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libxslt FEDORA-2013-4507

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for krb5 FEDORA-2013-5280

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4715

Rockwell Automation RSLinx Enterprise CPR9 through CPR9-SR6 is affected by CVE-2012-4715 due to a buffer overflow in LogReceiver.exe that can be triggered by UDP packets with improper length values, potentially causing a DoS or arbitrary code execution via Logger.dll. The vulnerability is exploit...

CVE-2012-4715

Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a UDP packet with a certain integer...

CVE-2012-4714

Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9 through CPR9-SR6 contains an integer overflow in RNADiagnostics.dll that allows remote attackers to cause a DoS by sending UDP datagrams with large integers, potentially crashing RNADiagReceiver.exe. All affected versions should upgrad...

CVE-2012-4695

CVE-2012-4695 affects Rockwell Automation RSLinx Enterprise CPR9 and CPR9-SR1 to CPR9-SR6. Vulnerability lies in LogReceiver.exe and Logger.dll, where a zero-byte UDP datagram (and related input handling) can trigger a DoS (service outage) remotely. The ICS-CERT advisory describes multiple input-...

CVE-2012-4713

The CVE-2012-4713 entry concerns Rockwell Automation FactoryTalk Services Platform (RNADiagnostics.dll) with affected CPR9 through CPR9-SR6. The root cause is an integer signedness/input validation issue that allows remote attackers to trigger a DoS by sending UDP datagrams containing a negative ...

Fedora 18 : libuser-0.58-3.fc18 (2013-4571)

This update fixes a TOCTOU race condition when copying and removing directory trees. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

BigAnt Server DUPF Command Arbitrary File Upload (CVE-2012-6274)

An arbitrary file upload vulnerability exists in BigAnt Server. The vulnerability is due to lack of authentication and a directory traversal weakness in processing a DUPF command. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server...

VMware ESX and ESXi Server SOAP Request Handling Denial Of Service (CVE-2012-5703)

The vulnerability is due to improper handling of certain SOAP requests in the vSphere API...

Fedora 18 : libxslt-1.1.28-1.fc18 (2013-4507)

Update to libxslt-1.1.28 to fix CVE-2012-6139 where the library could crash on invalid key references in stylesheets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

CVE-2012-0570

CVE-2012-0570 is described as an unspecified local vulnerability in Solaris 8–11 related to Libraries/Libc. Multiple connected sources confirm the issue affecting Solaris components (Libraries/Libc) and note exploitability conditions: the vulnerability is easily exploitable with local OS access a...

CVE-2012-4303

Technical details for CVE-2012-4303 are not publicly provided in the connected documents. The available sources only describe an unspecified vulnerability in Oracle WebCenter Content with limited context. Monitor for updates from official advisories; avoid speculation.

CVE-2012-0568

Summary (CVE-2012-0568) : A vulnerability in Oracle/Sun Solaris 8–10 affecting the Solaris component (subcomponent: Utility/fdformat). The underlying issue is unspecified and relates to confidentiality, with local attackers able to influence confidentiality via unknown vectors. Exploitation requi...

RHEL 6 : kernel (RHSA-2013:0741)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0741 advisory. - kernel: use after free bug in quota handling CVE-2012-2133 - kernel: race condition with PTRACESETREGS CVE-2013-0871 Note that Nessus has...

Important: Red Hat Security Advisory: apache-cxf security update

An update for the Apache CXF component of JBoss Portal Platform 6.0.0 which fixes two security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

CVE-2012-5415

Race condition on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service CPU consumption or device reload by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272...

CVE-2012-3022

TrendLink (Canary Labs) ActiveX control SaveToFile in TrendDisplay.dll is vulnerable in versions up to 9.0.2.27051. The vulnerability allows a remote attacker, via a crafted web site, to create arbitrary files and potentially execute arbitrary code on the client. Public documentation consistently...