JVN#26026353: WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting

The WordPress plugin "Markdown on Save Improved" contains a stored cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. While the...

SAP NetWeaver Multiple Vulnerabilities (1585527, 1583300, 1585527)

SAP NetWeaver is prone to multiple vulnerabilities. This VT has been deprecated because it is covering a currently unsupported product. It is therefore no longer functional. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

UBUNTU-CVE-2015-8867

The opensslrandompseudobytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RANDpseudobytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified...

Design/Logic Flaw

The opensslrandompseudobytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RANDpseudobytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified...

SUSE SLED12 Security Update : python-tornado (SUSE-SU-2016:1195-1)

The python-tornado module was updated to version 4.2.1, which brings several fixes, enhancements and new features. The following security issues have been fixed : - A path traversal vulnerability in StaticFileHandler, in which files whose names started with the staticpath directory but were not...

Ubuntu 12.04 LTS / 14.04 / 15.10 / 16.04 : firefox vulnerabilities (USN-2936-1) (deprecated)

This plugin has been deprecated because the fix caused errors, and the replacement fix is versioned strangely. Run ubuntuUSN-2936-3.nasl, plugin id 91255, instead. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2016/05/19. Deprecated by ubuntuUSN-2936-3.nasl. if...

AIX 6.1 TL 9 : bind (IV81279) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...

AIX 5.3 TL 12 : bind (IV81278) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...

AIX 7.1 TL 4 : bind (IV81281) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...

AIX 7.2 TL 0 : bind (IV81282) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...

Solaris 10 (sparc) : 152252-02 (deprecated)

SunOS 5.10: sudo Patch. Date this patch was last updated by Sun : Feb/09/17 This plugin has been deprecated and either replaced with individual 152252 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Solaris 10 (sparc) : 152254-01 (deprecated)

SunOS 5.10: sudo Source Patch. Date this patch was last updated by Sun : Apr/20/16 This plugin has been deprecated and either replaced with individual 152254 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 152253-02 (deprecated)

SunOS 5.10x86: sudo Patch. Date this patch was last updated by Sun : Feb/09/17 This plugin has been deprecated and either replaced with individual 152253 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Solaris 10 (x86) : 152255-01 (deprecated)

SunOS 5.10x86: sudo Source Patch. Date this patch was last updated by Sun : Apr/20/16 This plugin has been deprecated and either replaced with individual 152255 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 152097-71 (deprecated)

JavaSE 7: update 171 patch equivalent to JDK 7u171, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152097 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 10 (sparc) : 152096-71 (deprecated)

JavaSE 7: update 171 patch equivalent to JDK 7u171. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152096 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 152098-71 (deprecated)

JavaSE 7x86: update 171 patch equivalent to JDK 7u171. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152098 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 152099-71 (deprecated)

JavaSE 7x86: update 171 patch equivalent to JDK 7u171, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152099 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Insecure Default Configuration

Overview Affected versions of airbrake default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive...

openSUSE Security Update : 4813 (4813-1) (deprecated)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services This plugin has been renamed to openSUSE-2016-844.nasl, plugin ID 90108. %NASLMINLEVEL 999999 C Tenable Network Security, Inc...