38617 matches found
MiracleLinux 4 : firefox-45.5.1-1.0.1.AXS4 (AXSA:2016-1152:10)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2016-1152:10 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this release:...
MiracleLinux 7 : gstreamer1-plugins-good-1.4.5-3.el7 (AXSA:2017-1224:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1224:01 advisory. GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything fr...
MiracleLinux 7 : libtiff-4.0.3-32.el7 (AXSA:2019-4125:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4125:01 advisory. libtiff: buffer overflow in gif2tiff CVE-2016-3186 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denia...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003486)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003486 advisory. The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allow...
MiracleLinux 7 : ruby-2.0.0.648-39.0.4.el7.AXS7 (AXSA:2025-10964:04)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10964:04 advisory. CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution CVE-2017-9224: Fix stack...
CVE-2016-3695 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
CVE-2016-3699 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
CVE-2016-10889
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name...
CVE-2016-10810
In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...
CVE-2016-10315
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...
CVE-2016-10988
The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...
CVE-2016-10799
cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...
CVE-2016-10997
The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php...
CVE-2016-10991
The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion...
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
CVE-2016-10793
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...
CVE-2016-10775
cPanel before 60.0.25 allows arbitrary file-chown operations via reassignpostterminatecruft SEC-173...
CVE-2016-10766
edx-platform before 2016-06-06 allows CSRF...