mysql security update

5.1.66-2 - Add backported patch for CVE-2012-5611 Resolves: CVE-2012-5611...

GreenBrowser iframe Handling Double Free Vulnerability (Windows)

This host is installed with GreenBrowser and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbgreenbrowserdoublefreevulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ GreenBrowser iframe Handling Double Free Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c...

Important: bind

Issue Overview: A flaw was found in the DNS64 implementation in BIND. If a remote attacker sent a specially-crafted query to a named server, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by default. CVE-2012-5688 Affected Packages: bind Issue...

TVMOBiLi Media Server 2.1.0.3557 Denial Of Service

TVMOBiLi Media Server version 2.1.0.3557 suffers from a denial of service vulnerability via a malicious HTTP request. Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification...

ClipBucket 2.6 Revision 738 SQL Injection Vulnerability

ClipBucket version 2.6 revision 738 suffers from a remote SQL injection vulnerability. Product: ClipBucket Vendor: clip-bucket.com Vulnerable Versions: 2.6 Revision 738 and probably prior Tested Version: 2.6 Revision 738 Vendor Notification: November 7, 2012 Vendor Patch: November 28, 2012 Public...

Fedora 16 : php-symfony-symfony-1.4.20-2.fc16 (2012-19195)

upstream 1.4.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

NetIQ Privileged User Manager Password Change Authentication Bypass (version check)

According to the self-reported version of the NetIQ Privileged User Manager 'auth' package, the password for the 'admin' user of the NetIQ Privileged User Manager web application can be modified without authenticating via a specially crafted POST request. Note that Nessus did not check for the...

Achievo 1.4.5 Cross Site Scripting / SQL Injection Vulnerabilities

Achievo version 1.4.5 suffers from cross site scripting and remote SQL injection vulnerabilities. Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability...

Fedora 18 : gnome-system-log-3.6.1-2.fc18 (2012-18579)

This update changes gnome-system-log to use a stricter polkit policy when running with elevated privileges. Previously, it would only ask for the user's own password; now it requires anadministrator password. This problem has been reported as CVE-2012-5535 Note that Tenable Network Security has...

Achievo 1.4.5 Cross Site Scripting / SQL Injection

Advisory ID: HTB23126 Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting CWE-79 CVE References:...

RHEL 6 : bind (RHSA-2012:1549)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1549 advisory. - bind: DoS on servers using DNS64 CVE-2012-5688 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Qualcomm Android OS kernel privilege escalation and denial of service vulnerabilites

Overview Android OS kernels running on certain Qualcomm devices contain multiple vulnerabilities which could allow an attacker to cause privilege escalation or Denial of Service DoS. Description The Qualcomm Innovation Center, Inc. advisory states:Summary: A locally installed application can caus...

CVE-2012-6313

creationtimestamp| type| source ---|---|--- 2012-12-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38111...

[USN-1655-1] LibTIFF vulnerability

========================================================================== Ubuntu Security Notice USN-1655-1 December 05, 2012 tiff vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

bind security update

CentOS Errata and Security Advisory CESA-2012:1549 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base scor...

Moderate: Red Hat Security Advisory: pki security update

Updated pki-common and pki-tps packages that fix multiple security issues are now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2012-5688

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...

CVE-2012-5175

CVE-2012-5175 concerns an XSS vulnerability in KENT-WEB ACCESS REPORT (v4.2 and earlier). The issue arises in processing of access-log data, enabling remote attackers to inject arbitrary web script or HTML that may execute in a user’s browser. Affected product: ACCESS REPORT by KENT-WEB; versions...

CVE-2012-5176

The CVE-2012-5176 entry corresponds to a cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT versions 5.02 and earlier. The root cause is a flaw in how tags are embedded into the web page, which permits remote attackers to inject arbitrary script or HTML via those embedding vectors...

CVE-2012-3272

CVE-2012-3272 concerns an XSS vulnerability in HP Color LaserJet and LaserJet printers’ embedded web servers. Affected products include Color LaserJet CM3530, CM6030/CM6040, CP3525/CP4025/CP4525, CP6015, and LaserJet P3015/P4014/P4015/P4515, with firmware versions prior to the fixed releases. The...