4273 matches found
Product update: Virtuozzo 7.0 Update 5 Hotfix 2 (7.0.5-642)
The Hotfix 2 for Virtuozzo 7.0 Update 5 provides stability and usability bug fixes. Vulnerability id: PSBM-70653 Unable to connect network adapter to a running VM. Vulnerability id: PSBM-70557 Ghost file limit was ignored when migrating containers. Vulnerability id: PSBM-70551 plooptrim could ent...
Remove deprecated Authenticated Scan supporting service
In the past, during an Authenticated Scan, it was sometimes necessary to deploy a service onto the target machine. As this method is deprecated now, the service is removed. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Mark host as dead if going offline (failed ICMP ping) during scan - Phase 6
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : php-symfony (2017-4fcbd8a4c3)
2.8.25 2017-07-17 - security 23507 Security validate empty passwords again xabbuh - bug 23526 HttpFoundation Set meta refresh time to 0 in RedirectResponse content jnvsor - bug 23540 Disable inlining deprecated services alekitto - bug 23468 DI Handle root namespace in service definitions ro0NL -...
TYPO3 Formhandler 2.4.0 Cross Site Scripting
Advisory: Cross-Site Scripting in TYPO3 Formhandler Extension RedTeam Pentesting discovered a cross-site scripting vulnerability XSS in the TYPO3 extension Formhandler. Details ======= Product: TYPO3 Formhandler Affected Versions: 2.4.0 and probably earlier Fixed Versions: none, project no longer...
Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3592) (Stack Clash) (deprecated)
Description of changes: 2.6.39-400.297.4.el6uek - mm: larger stack guard gap, between vmas Hugh Dickins Orabug: 26326145 CVE-2017-1000364 This plugin has been deprecated because the recently released Oracle Linux 5 and 6, ELSA-2017-3592, does not fix any security problems relevant to already...
SUSE SLES11 Security Update : freeradius-server (SUSE-SU-2017:1777-1)
This update for freeradius-server fixes the following issues : - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. bnc1041445 - CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. bnc935573 The...
OneLogin Extension for Chrome Installed
OneLogin, a password manager extension for the Chrome browser, is installed on the remote Windows host. Note that the OneLogin servers were compromised on May 31, 2017. It is strongly recommended that users change their OneLogin password and the passwords for all accounts that were stored in...
OneLogin Extension for Firefox Installed
OneLogin, a password manager extension for the Firefox browser, is installed on the remote Windows host. Note that the OneLogin servers were compromised on May 31, 2017. It is strongly recommended that users change their OneLogin password and the passwords for all accounts that were stored in...
GoCD: Spring security configuration allows agent sessions to be hijacked
Summary ======= If agents have successfully logged in, then unauthenticated requests to /go/agent-websocket or /go/remoting/ will randomly succeed sometimes. Description ======== The deprecated X509ProcessingFilter apparently does not work without a HttpSessionContextIntegrationFilter earlier on...
Ubuntu 16.04 LTS : linux-hwe vulnerability (USN-3313-2) (deprecated)
CVE-2017-0605 was deemed 'Rejected', and withdrawn from the NIST database as further investigation showed that it was not a true security risk. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/10/15. include"compat.inc"; if description scriptid100667; scriptversion"3.7";...
Ubuntu 16.10 : linux, linux-raspi2 vulnerability (USN-3313-1) (deprecated)
CVE-2017-0605 was deemed 'Rejected', and withdrawn from the NIST database as further investigation showed that it was not a true security risk. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/10/15. include"compat.inc"; if description scriptid100666; scriptversion"3.7";...
Solaris 10 (sparc) : 152724-02 (deprecated)
GNOME 2.6.0: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 152724 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...
Solaris 10 (x86) : 152725-02 (deprecated)
GNOME 2.6.0x86: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 152725 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...
Solaris 10 (sparc) : 152651-01 (deprecated)
GNOME 2.6.0: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 152651 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...
Solaris 10 (x86) : 152652-01 (deprecated)
GNOME 2.6.0x86: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 152652 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...
Microsoft Windows 10 Version 1507 Unsupported Version Detection (deprecated)
This plugin has been replaced by Windows Security-End-of-Life plugins. C Tenable Network Security, Inc. @DEPRECATED@ Deprecated on 2024 Mar 14. Replaced by Windows SEoL plugins. include'compat.inc'; if description scriptid100064; scriptversion"1.10";...
F5 Networks BIG-IP : Linux kernel vulnerability (K82224417) Deprecated
The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service overflow or possibly have unspecified other impact via crafted system calls. CVE-2017-7308 - No F5 Syste...
CVE-2017-5186
Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...
