CVE-2017-8920

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

PT-2017-18624

Name of the Vulnerable Software and Affected Versions CGI:IRC versions prior to 0.5.12 Description The issue concerns a lack of proper output encoding for user-supplied input from the R parameter in irc.cgi, which can lead to XSS. Recommendations For versions prior to 0.5.12, update to version...

CVE-2017-8920: Improper Neutralization of Input During Web Page Generation

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

a-r-s.de XSS vulnerability

Vulnerable URL: http://www.a-r-s.de/ueber-uns/kontaktformular.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check a-r-s.de SS...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0101)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrus-avoid-write-only-variables.patch bz1444377 bz1444379 - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt .patch - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt .patch -...

Oracle Linux 6 : qemu-kvm (ELSA-2017-1206)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1206 advisory. - Resolves: bz1444377 CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines rhel-6.9.z - Resolves: bz1444379...

Amazon Linux AMI : R (ALAS-2017-819)

An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability...

Medium: R

Issue Overview: An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this...

heavy-r.com XSS vulnerability

Vulnerable URL: http://www.heavy-r.com/index.php?keyword=""'--!confirmOPENBUGBOUNTY...

r-rui.net XSS vulnerability

Vulnerable URL: http://www.r-rui.net/product4.php?cid="'--!confirmOPENBUGBOUNTY...

[SECURITY] Fedora 26 Update: rkward-0.6.5-5.fc26

RKWard aims to provide an easily extensible, easy to use IDE/GUI for the R-project. RKWard tries to combine the power of the R-language with the relative ease of use of commercial statistics tools. Long term plans include integration with office suites...

[SECURITY] Fedora 26 Update: rpy-2.8.5-3.fc26

RPy provides a robust Python interface to the R programming language. It can manage all kinds of R objects and can execute arbitrary R functions. All the errors from the R language are converted to Python exceptions...

[SECURITY] Fedora 26 Update: R-3.3.3-1.fc26

This is a metapackage that provides both core R userspace and all R development components. R is a language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide varie...

Veeam ONE and Automation Services

Challenge The suggestions below leverage the functionality of Veeam ONE in order to automate some administration tasks. Cause To be able to use the steps below, make sure you are using Veeam Availability Suite 8 or newer version. Solution VM with no backup 1. Create VM backup alarm in Veeam ONE...

PT-2017-17626

Name of the Vulnerable Software and Affected Versions radare2 version 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PE file. This is due to a problem in the r pkcs7 parse cms function...

PT-2017-8015

Name of the Vulnerable Software and Affected Versions uClibc-ng versions prior to 1.0.12 Description The issue allows remote DNS servers to cause a denial of service, resulting in an infinite loop, via a crafted packet. This is due to a problem in the read etc hosts r function in...

CVE-2016-5757

iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authentication credentials...

Fedora 24 : R / rkward / rpy (2017-da9d0f0dc0)

Update to 3.3.3. Fix CVE-2016-8714. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[SECURITY] Fedora 25 Update: R-3.3.3-1.fc25

This is a metapackage that provides both core R userspace and all R development components. R is a language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide varie...

[SECURITY] Fedora 25 Update: rkward-0.6.5-5.fc25

RKWard aims to provide an easily extensible, easy to use IDE/GUI for the R-project. RKWard tries to combine the power of the R-language with the relative ease of use of commercial statistics tools. Long term plans include integration with office suites...