kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:0726 Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

RHEL 7 : kernel (RHSA-2015:0726)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Google Pwnium Program Now Open All Year

Google is expanding its successful Pwnium vulnerability reward program–which has run at various security conferences for a couple of years now–to run continuously and offer an unlimited pool of financial rewards. Pwnium originally was established as an alternative to the Pwn2Own hacking contest a...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014. Notes: none...

CVE-2014-8615

CVE-2014-8615 is rejected/not used; this entry does not represent an active vulnerability.

UBUNTU-CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

PT-2015-4301 · Videolan +1 · Vlc Media Player +1

Name of the Vulnerable Software and Affected Versions: VLC media player version 2.1.5 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a DEP violation and application crash, via a crafted FLV file. This is due to a problem in the...

Session fixation

IBM BladeCenter SAS Connectivity Module aka NSSM and SAS RAID Module aka RSSM before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014. Notes: none...

CVE-2014-4640

CVE-2014-4640 is rejected/not used; this entry does not represent an active vulnerability.

Symantec-Endpoint-Protection-11.x,-12.x

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo ryujin Memelli Alexandru sickness Uifalvi offensive-security.com from ctypes import fro...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none...

Tape Inventory With: "Unknown media (possibly in use by another application)."

Challenge A tape inventory or catalog operation fails with the following error: Cannot inventory tape in Drive 1 Server: , Library: , Drive ID: TapeX. Unknown media possibly in use by another application. Cause This error is shown when Veeam Backup & Replication does not recognize the MTF header ...

Uninstalling Veeam Collectors if a System Resource Pool Was Used for Auto-Deployment

Purpose This article documents how to uninstall Veeam Management Pack for Microsoft System Center if during auto-deployment of Veeam Collectors, one of the system resource pools was used i.e., All Management Servers Resource Pool, Notifications Resource Pool, or AD Assignment Resource Pool. This...

Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerabilities (2984615)

This host is missing an important security update according to Microsoft Bulletin MS14-045. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Pool Allocation CVE-2014-4064 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

PWGen - Generator of cryptographically-strong passwords

PWGen is a professional password generator capable of creating large amounts of cryptographically-secure passwords or passphrases consisting of words from a word list. It uses a “random pool ” technique to generate random data based on user inputs keystrokes, mouse handling and volatile system...

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow

No description provided by source. Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo 'ryujin' Memelli & Alexandru 'sickness' Uifalvi at...