CVE-2012-0034

The NonManagedConnectionFactory in JBoss Enterprise Application Platform EAP 5.1.2 and 5.2.0, Web Platform EWP 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by readi...

Fedora 17 : seamonkey-2.15.1-1.fc17 (2013-1382)

Update to 2.15.1 Update to 2.15 Fixes CVE-2013-0743, CVE-2013-0744-0760, CVE-2013-0762, CVE-2013-0764, CVE-2013-0766-0770 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

RedHat Update for nss, nss-util, and nspr RHSA-2013:0213-01

Check for the Version of nss, nss-util, and nspr OpenVAS Vulnerability Test RedHat Update for nss, nss-util, and nspr RHSA-2013:0213-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute...

RedHat Update for mysql RHSA-2013:0219-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"mys...

RHEL 6 : mysql (RHSA-2013:0219)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0219 advisory. - mysql: unspecified DoS vulnerability related to InnoDB CPU Jan 2013 CVE-2012-0572 - mysql: unspecified DoS vulnerability related to Server...

RHEL 5 / 6 : freetype (RHSA-2013:0216)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0216 advisory. - freetype: heap buffer over-read in BDF parsing bdfparseglyphs 37906 CVE-2012-5669 Note that Nessus has not tested for this issue but has instea...

RedHat Update for libvirt RHSA-2013:0199-01

Check for the Version of libvirt OpenVAS Vulnerability Test RedHat Update for libvirt RHSA-2013:0199-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for libvirt RHSA-2013:0199-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

JBoss Enterprise Portal Platform多个跨站脚本执行漏洞

BUGTRAQ ID: 57521 CVECAN ID: CVE-2012-5531 JBoss Enterprise Portal Platform是构建和管理动态网站的平台。 JBoss Enterprise Portal Platform 5.2.2内的GateIn Portal中存在多个XSS漏洞，可允许远程攻击者通过特制URL注入任意脚本代码。 0 RedHat Enterprise Portal Platform 5.x 厂商补丁： RedHat ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RHEL 5 : rgmanager (RHSA-2011:1000)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1000 advisory. - rgmanager: insecure library loading vulnerability CVE-2010-3389 Note that Nessus has not tested for this issue but has instead relied only on the...

Java Applet - AverageRangeStatisticImpl Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

RHEL 5 : kernel (RHSA-2011:1163)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1163 advisory. - kernel: xen: svm: insufficiencies in handling emulated instructions during vm exits CVE-2011-1780 - kernel: kernel: netsched: fix...

RHEL 6 : JBoss Enterprise Application Platform 5.1.2 update (Low) (RHSA-2011:1798)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1798 advisory. - Invoker servlets authentication bypass HTTP verb tampering CVE-2011-4085 - openid4java AX extension: MITM due to improper validation of AX...

RHEL 5 : openssl (RHSA-2009:1335)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1335 advisory. - openssl: mimehdrcmp NULL dereference crash CVE-2006-7250 - openssl: ASN1 printing crash CVE-2009-0590 - OpenSSL: DTLS epoch record buffer...

RHEL 5 : jbossas (RHSA-2013:0147)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0147 advisory. - Tomcat/JBoss Web: Bypass of security constraints CVE-2012-3546 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 6 : qemu-kvm (RHSA-2011:1777)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1777 advisory. - qemu: ccid: buffer overflow in handling of VSCATR message CVE-2011-4111 Note that Nessus has not tested for this issue but has instead relied only ...

RHEL 5 / 6 : jbossas and jboss-naming (RHSA-2012:1026)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1026 advisory. - JNDI: unauthenticated remote write access is permitted by default CVE-2011-4605 - JBoss: authentication bypass when running under JACC...

RHEL 5 : flash-plugin (RHSA-2010:0464)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0464 advisory. - flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL CVE-2008-4546 - flash-plugin: multiple...

RHEL 5 : kvm (RHSA-2012:0149)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0149 advisory. - kernel: kvm: device assignment DoS CVE-2011-4347 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 5 : conga (RHSA-2012:0151)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0151 advisory. - zope: XSS on error page CVE-2010-1104 - plone: A reflected cross site scripting vulnerability CVE-2011-1948 Note that Nessus has not teste...